RE: WebDAV exploit?

2003-03-18 Thread Dave Watts
> Everything IT related everywhere is perpetually broken. Thats > the marketing model of all the smart companies. Name one > peiece of software anywhere, ever, that does everything > perfectly? It doesnt exist. If it did exist, Microsoft would > buy it and supress it and probably 'hush up' anyb

RE: WebDAV exploit?

2003-03-18 Thread Sean Bucklar
t breaks worth what it fixes." Any presumption that begins with 'If it ain't broke' doesnt apply when dealing with IT. -Original Message- From: samcfug [mailto:[EMAIL PROTECTED] Sent: Wednesday, 19 March 2003 12:10 PM To: CF-Talk Subject: Re: WebDAV exploit? Hmmm Difficult to

Re: WebDAV exploit?

2003-03-18 Thread samcfug
Message - From: "Sean" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Tuesday, March 18, 2003 7:30 PM Subject: Re: WebDAV exploit? | Apart from licencing costs? performance concerns? Recode issues with a few | thousand CF sites? legacy constraint

Re: WebDAV exploit?

2003-03-18 Thread Sean
[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Wednesday, March 19, 2003 11:08 AM Subject: Re: WebDAV exploit? > Many of them probably need to have the MS app "regclean.exe" run to cleanup the > registry problems that are interfering with the order

Re: WebDAV exploit?

2003-03-18 Thread samcfug
t;[EMAIL PROTECTED]> Sent: Tuesday, March 18, 2003 6:32 PM Subject: Re: WebDAV exploit? | Rolled out the webdav fix across the full server farm, including umm 30 or | 40 ish CF5 boxes on IIS 5. No issues to date. Had a few boxes that needed to | be manually kicked a few times when they hung duri

Re: WebDAV exploit?

2003-03-18 Thread Sean
Rolled out the webdav fix across the full server farm, including umm 30 or 40 ish CF5 boxes on IIS 5. No issues to date. Had a few boxes that needed to be manually kicked a few times when they hung during shut down, and a few boxes that needed the services restarted when they came back up. But not

Re: WebDAV exploit?

2003-03-18 Thread samcfug
I installed it on a Win2k adv server with CF 5.0 and then re-booted the server. It all works fine. I suggest stopping the CF and Web services before applying the patch, then re-boot. I heard it mention on today's web cast, but apparently it did not affect me. I also use URLScan + IIS lockdown t

RE: WebDAV exploit?

2003-03-18 Thread Ben Doom
I had no problem. Patch, reboot, and all is happy. IIS was (AFAIK) otherwise up to date. -- Ben Doom Programmer & General Lackey Moonbow Software, Inc : -Original Message- : From: Lofback, Chris [mailto:[EMAIL PROTECTED] : Sent: Tuesday, March 18, 2003 4:36 PM : To: CF-Talk :

RE: WebDAV exploit?

2003-03-18 Thread Dave Watts
> Anybody had a problem with CF5 after applying the patch that > corrects the Microsoft WebDAV buffer overflow vulnerability > for Win2K/IIS5? We're looking at patching several CF5 boxes > and heard that some folks had problems. > > Here's the WebDAV link (watch the wrap!): > > http://www.mic

RE: WebDAV exploit?

2003-03-18 Thread Stephenie Hamilton
We patched 7 CF 5 servers yesterday. No issues at all. ~~ Stephenie Hamilton Macromedia Certified ColdFusion Professional CFXHosting -Original Message- From: Lofback, Chris [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 18, 2003 4:36 PM To: CF-Talk Subject: WebDAV exploit? Anybody

Re: WebDAV exploit?

2003-03-18 Thread paris lundis
no problem here with the patch and CF 5. -paris -- Original Message -- From: "Lofback, Chris" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Tue, 18 Mar 2003 16:35:40 -0500 >Anybody had a problem with CF5 after applying the patch that corrects the