RE: WMF Vulnerability Script Fix - Attn Jim

  • From: Paul Noble <pnoble@xxxxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 9 Jan 2006 15:53:23 -0000

WMF-4 'response header '.emf' file type
WMF-5 'response header '.wmf' file type



-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Monday, January 09, 2006 2:37 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: WMF Vulnerability Script Fix - Attn Jim

http://www.ISAserver.org

Which ones?

--------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
--------------------------------------------

-----Original Message-----
From: Paul Noble [mailto:pnoble@xxxxxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Monday, January 09, 2006 5:25 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: WMF Vulnerability Script Fix - Attn Jim

http://www.ISAserver.org

This is the same issue Joe and myself ran into, but I found on my server
it
seemed to just be the additional header entries on 1.1 that caused it to
bum
out, cleared the ticks on that and 1.1 is working fine. 

-----Original Message-----
From: Paul Crisp [mailto:pcrisp@xxxxxxxxxxxxxxxxx] 
Sent: Monday, January 09, 2006 10:53 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] WMF Vulnerability Script Fix - Attn Jim

http://www.ISAserver.org

Hi Jim
 
Ok, i confirmed to you on Friday 6th that your new script was working
with
my firewalls without a problem. I then noticed that a newer version was
posted so updated my firewalls this morning, now after 10mins the
Microsoft
Firewall service crashes with the following two messages in the event
log:
 
The Firewall service stopped because an application filter module
C:\Program
Files\Microsoft ISA Server\HttpFilter.dll generated an exception code
C0000005 in address 60FF647F when function CompleteAsyncIO was called.
To
resolve this error, remove recently installed application filters and
restart the service. 
 
Faulting application wspsrv.exe, version 4.0.2163.213, stamp 420bdbd0,
faulting module httpfilter.dll, version 4.0.2163.213, stamp 420bdb2f,
debug?
0, fault address 0x0001647f. 
 
I have now removed the filters from both my firewalls and all appears to
be
working before ever installing the script
 
Any clues?
 
Regards
 
Paul Crisp
 
 
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
pnoble@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
pnoble@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


Other related posts: