Browse by Tags

All Tags » IIS News » Community Info (RSS)
Security Alert - Vulnerability in Internet Information Services Could Allow Elevation of Privilege
Two days ago, a new vulnerability was found in WebDav for IIS, although few have make a big deal out of it, personally I think the impact is 'quite' minimum or at least zero in my environment coz I got no WebDav at all :) LOL... anyway - here...
Posted Wed, May 20 2009 by qbernard | with no comments
Filed under: , , ,
Top 8 - Web 2.0 Security Threats
Got this from a mailing list - the top 8 security threats in Web 2.0 applications. 1. Insufficient Authentication Controls 2. Cross Site Scripting (XSS) 3. Cross Site Request Forgery (CSRF) 4. Phishing 5. Information Leakage 6. Injection Flaws 7. Information...
Posted Wed, Feb 18 2009 by qbernard | 2 comment(s)
Filed under: ,
Improving Web Service Security: WCF
The Microsoft Patterns & Practices team just published a beta copy of Improving Web Service Security for WCF or code name Indigo last week. This is another great playbook from the team that gives us many great guides and practices in using Microsoft...
Posted Wed, Jun 11 2008 by qbernard | with no comments
Filed under: , ,
IIS 7 Shared Hosting Summary
Damn! I love this blog post from Thomas , and you can easily noticed that IIS team has put lot of effort in shared hosting environment, from shared to delegated configuration, and all the way to process model improvements. The dynamicIdleThreshold for...
Posted Wed, May 14 2008 by qbernard | 1 comment(s)
Filed under: , ,
IIS FTP PassivePortRange
Years ago, I wrote the KB on passive port range at MSKB site - How To Configure PassivePortRange In IIS http://support.microsoft.com/?id=555022 Lazy to update the article for IIS 7.0 FTP detail, and I'm not going to add that here :) Coz you can get...
Posted Wed, May 14 2008 by qbernard | with no comments
Filed under: , ,
Security Alerts - April 2008 (Special)
Microsoft revised two security bulletins yesterday. One of which is related to .Net Framework published last year , not major update or new fixes but rather doc updates on changes related to releases of WinXP SP3. On the other hand, in the recent Hack...
Posted Thu, Apr 24 2008 by qbernard | 2 comment(s)
Filed under: ,
Security Alerts - April 2008
Oh well, been busy and no time to post this back then. In the routine patch Tuesday this month, Microsoft released 8 security bulletins with 5 of which in critical severity and one specific bulletin is related to IIS in a way. The 08-022 actually replaced...
Posted Wed, Apr 23 2008 by qbernard | with no comments
Filed under: ,
Security Alerts - March 2008 (Special)
Today, Microsoft released a major revision for a vulneribility reported last year on .Net Framework. If you running framework version 1.0, 1.1 and 2.0. Please apply the fix asap. Take note that even you are running 3.0, it is essentially using .Net Framework...
Posted Wed, Mar 26 2008 by qbernard | with no comments
Filed under: ,
Security Alerts - March 2008
In this month security bulletin , although all critical fixes are related to MS Office, one of the bulletin is related to Office Web Component and hence if you utilizing OWC in your web application, you need to apply the patch asap. Details: Vulnerabilities...
Posted Thu, Mar 13 2008 by qbernard | with no comments
Filed under: , ,
IIS 7 Released !!!!
It is official now :) lazy to type.... head over to Bill Staples blog post for more info :) Together with many great stuff from IIS team, including the new FTP component , FPSE , and Web Playlist :) (errr.. related to media server if you are in to media...
Posted Thu, Feb 28 2008 by qbernard | 3 comment(s)
Filed under: , , ,
Security Alerts - February 2008
In this month security bulletin , there are two important bulletins related to IIS, depend on your environment setup, though it is rated as important, you might want to patch it asap. Here's the bulletin details. Vulnerability in Internet Information...
Posted Wed, Feb 13 2008 by qbernard | with no comments
Filed under: , ,
Microsoft Web Deployment Tool aka IIS 7 Migration Tool with bonus features.
After a lonnnnng wait !! Today, the IIS team releases the new web deployment tool technical preview 1 :) The deployment tool called msdeploy.exe is essentially a migration toolkit similar with the one the shipped for IIS 6.0. However, the team spent extra...
Posted Thu, Jan 24 2008 by qbernard | 1 comment(s)
Filed under: , ,
IIS FTP and IE 7 (No user folder redirection)
Remember about this blog I posted last year... and many users still complaining about the new IE 7 behavior changes when connecting to IIS FTP. It is confirmed now - as per this latest KB , this is new design changed in IE 7 :) and you are recommended...
Posted Mon, Oct 8 2007 by qbernard | 2 comment(s)
Filed under: , ,
Windows Server 2008 - Release Candidate 0
RC0 is out ! I'm downloading it now..... Zzzz... but may take days from my location :( Anyway, can't wait to test drive it! The release page however does not shows the direct download links, you can search it at MS Download . You will see 5 flavors...
Posted Tue, Sep 25 2007 by qbernard | with no comments
Filed under: , ,
IIS Admin Blog - Paul Lynch
Paul is one of the IIS MVP that used to take care of IIS-Resources.com with me. IIS-Resources.com has been down, while I still have not heard any news from Jeffery (the owner), I certainly hope he is doing well, I mean for those that are close to Jeffery...
Posted Sat, Sep 8 2007 by qbernard | with no comments
Filed under: , ,
Book - Introducing Windows Server 2008
Want to learn more about Windows Server 2008 or formerly known as Longhorn ? then grab the latest book Introducing Windows Server 2008 from Mitch . Mitch is one of the regular author for Windows + IIS books and a Microsoft MVP for many years. You can...
Posted Mon, Jul 30 2007 by qbernard | with no comments
Filed under: ,
Bug: Application Creation via AppCmd.exe
I was trying to find the syntax in AppCmd.exe to convert an existing virtual directory say - myVdir to be an application. Obviously, the first step is to create the virtual directory. (I know I can do both with appcmd add app bla bla and create the associated...
Posted Sun, Jul 15 2007 by qbernard | 2 comment(s)
Filed under: , ,
Netcraft: IIS is picking up...
According to Netcraft Web Server Survey, Microsoft IIS web server continue to gains more market shares for the past three months. In July , up to date with 1.01% improvements, while 0.34% and 0.36% gained in previous two months :) With the latest figures...
Posted Wed, Jul 11 2007 by qbernard | with no comments
Filed under: , ,
Security Alerts - Microsoft Internet Information Services Could Allow Remote Code Execution (MS07-041)
In this month Microsoft security bulletin , there's one important vulnerability related to IIS. Summary: This important security update resolves a privately reported vulnerability. This vulnerability could allow remote code execution if an attacker...
Posted Wed, Jul 11 2007 by qbernard | 1 comment(s)
Filed under: , ,
Beta 3 - IIS 7
Yes! the moment is here ! The real IIS 7 is out! I mean the one with all the promising features. New FTPS , Shared configuration , Web Manager , etc . Zzzz.. but I'm traveling now :( why pick the date when I'm not with my test machine! Anyway...
Posted Thu, Apr 26 2007 by qbernard | 1 comment(s)
Filed under: , , ,
More Posts Next page »

News

Search

Go

This Blog

Tags

Archives

IIS Sites

MVPs - MVPs

IIS Related

Syndication