Ben, whats the spec of the server in question, have you got all the latest
patches and service packs?

Cheers
Sam Thompson
----------------------------------------------
2cs Communications Ltd
http://www.2cs.com
[EMAIL PROTECTED]
T: 01473 622263
F: 01473 622515
-----------------------------------------------
----- Original Message -----
From: "Ben Jacob" <[EMAIL PROTECTED]>
To: "ActiveServerPages" <[EMAIL PROTECTED]>
Sent: Wednesday, September 04, 2002 1:06 AM
Subject: Re: IIS bug with <pre> CRLF</pre> or am I carazy????


> We allready test with the crlf on a test server nothing happend
> on production server (where we can not do too much testing )
>
> 1. original code - after few hours the srver go down
> 2. the page modify ro exclude  vb code (the page was a asp with allot of
> code) but with the CRLF- the server go down
> 3. The orignal code without the CRLF - the server stay up, it is working
> like that since Monday
> 4. on test server the original code work without any problrm
>
> so for my prespective a bunch of CRLF's do take the server down (or I am
> crazy...)\
> and we will check for crlf on entry forms
>
> what do u know
>
> thank
>
> beny
> ----- Original Message -----
> From: "Ben Timby" <[EMAIL PROTECTED]>
> To: "ActiveServerPages" <[EMAIL PROTECTED]>
> Sent: Tuesday, September 03, 2002 9:21 PM
> Subject: RE: IIS bug with <pre> CRLF</pre> or am I carazy????
>
>
> >
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Ben, I am sorry, I just don't buy it. I would imagine that there has
> > to be something else wrong w/ the app other than a bunch of CRLF's in
> > the page. I would wait until you can do some testing before I would
> > point any fingers. I guess stranger stuff has happened, but I would
> > base my conclusion on hard facts, and not speculation.
> >
> > Ben Timby
> > Webexcellence
> > PH: 317.423.3548 x23
> > TF: 800.808.6332 x23
> > FX: 317.423.8735
> > [EMAIL PROTECTED]
> > www.webexc.com
> >
> > - -----Original Message-----
> > From: Ben Jacob [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, September 03, 2002 6:40 AM
> > To: ActiveServerPages
> > Subject: Re: IIS bug with <pre> CRLF</pre> or am I carazy????
> >
> >
> >
> > no the prograner just hit the [enter]  key, when u look on HEX u see
> > 0d10 0d10 for two blocks
> > we found that ot was working like that for almost a year, but this
> > page will
> > take the server down
> > theb only change we can think of was sp3 ?
> >
> > beny
> > - ----- Original Message -----
> > From: "Sam Thompson" <[EMAIL PROTECTED]>
> > To: "ActiveServerPages" <[EMAIL PROTECTED]>
> > Sent: Monday, September 02, 2002 10:36 AM
> > Subject: Re: IIS bug with <pre> CRLF</pre> or am I carazy????
> >
> >
> > > what did the code look like?
> > >
> > > <pre><%=CrLf%></pre> ?
> > >
> > > Sam Thompson
> > > ----------------------------------------------
> > > 2cs Communications Ltd
> > > http://www.2cs.com
> > > [EMAIL PROTECTED]
> > > T: 01473 622263
> > > F: 01473 622515
> > > -----------------------------------------------
> > > ----- Original Message -----
> > > From: "Ben Jacob" <[EMAIL PROTECTED]>
> > > To: "ActiveServerPages" <[EMAIL PROTECTED]>
> > > Sent: Saturday, August 31, 2002 11:46 PM
> > > Subject: IIS bug with <pre> CRLF</pre> or am I carazy????
> > >
> > >
> > > > Here is a weird story/IIs bug. For 4 days production server was
> > > > down,
> > > every
> > > > thing look normal, no error on the log but the sites were
> > > > behaving like under an external attack. It toke to serve a asp
> > > > page up to 5 minutes
> > and
> > > if
> > > > we did not shut down the IIS after few hours the server become
> > > unaccessible
> > > > and require power hard boot. We look every where found nothing (I
> > > > was
> > sure
> > > > it is a virus or Trojan). By try and error we identified one site
> > > >  that cause the problem (there are more than  30 sites there).
> > > >
> > > > Make the long story short we found a asp file with <pre></pre>
> > > > with 480 CRLF in between. Don't ask me why the html programmer
> > > > did it, I do not
> > > care,
> > > > but if it is true it means that a simple html code can take down
> > > > a
> > server
> > > > (even a user on a forum / form that allow to post text with html
> > > > tags)
> > > >
> > > > Can some one test it? For some internal problems we will not have
> > > > access
> > > to
> > > > test server till Tuesday.  And I am not daring to try it on
> > > > production
> > one
> > > > more time.
> > > >
> > > > I am not even sure it is the problem. All we know is that the
> > > > site with
> > > this
> > > > asp file was causing the problem and I can not take them down one
> > > > more
> > > time.
> > > >
> > > >
> > > >
> > > > thank
> > > >
> > > > Beny
> > > >
> > > >
> > > >
> > > > ---
> > > > You are currently subscribed to activeserverpages as: [EMAIL PROTECTED]
> > > > To unsubscribe send a blank email to
> > > %%email.unsub%%
> > > >
> > >
> > >
> > > ---
> > > You are currently subscribed to activeserverpages as:
> > > [EMAIL PROTECTED] To unsubscribe send a blank email to
> > %%email.unsub%%
> > >
> >
> >
> >
> >
> >
> > - ---
> > You are currently subscribed to activeserverpages as: [EMAIL PROTECTED]
> > To unsubscribe send a blank email to
> > %%email.unsub%%
> >
> > -----BEGIN PGP SIGNATURE-----
> > Version: PGP 7.0.4
> >
> > iQA/AwUBPXULrPnby1cCm2Q8EQJHeQCfcf95lgqK4gjYwxAj1FUaeaYc1KcAn0pZ
> > 6jRnW2yKNlJM+xGUx/m4HIYa
> > =RiZU
> > -----END PGP SIGNATURE-----
> >
> >
> >
> > ---
> > You are currently subscribed to activeserverpages as: [EMAIL PROTECTED]
> > To unsubscribe send a blank email to
> %%email.unsub%%
> >
>
>
> ---
> You are currently subscribed to activeserverpages as: [EMAIL PROTECTED]
> To unsubscribe send a blank email to
%%email.unsub%%
>


---
You are currently subscribed to activeserverpages as: [email protected]
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to