do I still need asp.net canonicalization patch in kb887289?

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Jose S - 25 Oct 2005 01:05 GMT

I am building a new W2K IIS6 server to handle asp.net pages. Is it still
necessary to manuall install the security patch to protect against
canonicalization exploits as described in KB887289, or is this handled with
windows/microsoft update now?

Thanks for any info

Signature

Jose S

Reply to this Message

Dominick Baier [DevelopMentor] - 25 Oct 2005 18:50 GMT

Hello Jose,

on IIS6 this was never a problem.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> I am building a new W2K IIS6 server to handle asp.net pages. Is it
> still necessary to manuall install the security patch to protect
> against canonicalization exploits as described in KB887289, or is this
> handled with windows/microsoft update now?
>
> Thanks for any info

Reply to this Message

Jose S - 25 Oct 2005 19:21 GMT

Thanks Dominick,
I hoped that was the case (that KB887289 is not needed on IIS6) but I never
actually have seen that stated clearly by microsoft.
Your response is much appreciated.

Signature

Jose S

> Hello Jose,
>
[quoted text clipped - 10 lines]
> >
> > Thanks for any info

Reply to this Message

do I still need asp.net canonicalization patch in kb887289?

Free Magazines