Update on MS04-021
It appears that there are some problems with IIS 4.0 in the recent Security Bulletin (July) MS04-021 updated 21/7/04 (IIS Redirection Vulnerability). According to the 873041 that IIS may not response after the patch and you will get
FAULT ->68c16296 39b8ac010000 cmp [eax+0x1ac],edi ds:000001ac=????????
in Drwtsn32.log. To date, I have yet to see any actual symptom described in the KB, except this one.
Dr. Watson Log -“The exception generated was c0000005 at address 68c16296 (HTTP_REQ_BASE::OnCompleteRequest”
In other case, I have seen two posts in public newsgroups relating to problems after install the patch. the error:
Event Log - “Error 0126: The specified module could not be found.”
The above error apply to both w3svc and msftpsvc.
If you have any problem with IIS 4.0 after install the patch from MS04-021, Please review the KB stated above and contact Microsoft PSS for the fix.