???? ID: 176113 - ????? ???????: 03 ?????? 2010 - ??????: 4.0

BUG: ?? ????? ???? ??? ???? ?? ???? ?? ????? ?? ??? ??????? CGI ???

???? ?????? ???????????? ?????? ???????? KB ?? ???????? ????? ?? ??? ???? ????? ????
?? ???????? ?? ?????? ??? ?? ?? ???? ???? ???? ??.
?????? ??????This article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
?? ?????? ??????? ???? ??? ?? ??? ???????????? ?? ??? Microsoft ??????? ?????????? ???????? (IIS) ??????? 7.0 ???????? ?? Microsoft Windows Server 2008 ??? ??? ??? IIS 7.0 ???????????? ??? ?????? ??????? ?????? ??? IIS ???????-?????? ?????? ?? ???? ??? ???? ??????? ?? ??? ????? Microsoft ??? ???? ?? ????:
HTTP://www.Microsoft.com/technet/Security/prodtech/IIS.mspx (http://www.microsoft.com/technet/security/prodtech/IIS.mspx)
IIS 7.0 ?? ???? ??? ???? ??????? ?? ??? ????? Microsoft ??? ???? ?? ????:
HTTP://www.IIS.NET/default.aspx?tabid=1 (http://www.iis.net/default.aspx?tabid=1)

?? ????? ??

??? ?? ??????? ???? | ??? ?? ??????? ????

?????

?? ???? ???-???? ????? ??? "302 ???????? Moved" ??????????? ?? ??? ?? ????? ????? ??? ???? CGI ????????? ????? ??, ?? ??????? ????? ????? (IIS) ???? ????? ??? ?? ????? ???? ?????
????? ?? ???? ????

????????

?? ??????? ?? ??? ????????? ???, "??? ????? ????? directives ???? ??? ?? ???? ???? ??????? ?? CGI ????????, ??????? ??? ??? ??????? ???, ?? ????????? ????????? ??? ????? directives..."

???? ?????? ?? ??? ??? ????????? ???? ?? EXE ?? ????? ?? ??? "nph-" ?? ???? ???? ?? ?? ??? HTTP ????? ??? ?? ???????? ??? ?? ???? ????????? ??? ?????? ????? ???? "nph-" ?? ????? ?? ??? ?? ???-????? ????? ??? ??? ??? ????? ?? ??? CGI ????????? ??? CGI ?? ??? ??? ??? ?????? ??? ??? (parsed ????? ???), ?? ????? ????? CGI directives ?? ?? ???? ?????? (???????-??????, ?????, ?? ??????) ?? ???? ??? ????? HTTP ???????? ???? ?? ???? ?? ???? ???? ?? directive ?? CGI ???????? ???? ??? ?? ???? ?? ??? ???? ???? HTTP ????? ??? ???????? ???? ??, ?? ?? ???? ?? ???? ????? ?? ???? ?????? ????????? ?? ????? ???? ??????

???? ??? ??? ???-????? ????? ??? ??? ??? ?? ??? ??? CGI ??? ???? ??? ????? ??? ???? CGI ????????? ???????? ???? ?? ??? ????? ??? ???? ???? HTTP ???????? ?? ???????? ???? ?????? ????? ????? ???? ?????? ?? ??????? ???? ????? ??? ?? ??? ?? ?? ??? ??? ???

????? ?? ?? ???? CGI ????????? ????? ??? "nph-" ?? ???? ???? ?? ???-????? ????? ??? ??? ??? ????? ???? ??, ??????, CGI ????????? parsed ????? ??? ??? ??? ??? ??? ????
????? ?? ???? ????

??????

Microsoft ?? ?????? ?? ?? ?? ???? ?? ???? ??? ???????? Microsoft ???????? ??? ??? ?? ???? ?? ?????
????? ?? ???? ????

???? ???????

??????? ?? ???: ??????? ???? ?? ??? ???

?? Win32 ????? ????????? ?? ??? ??? ?? CGI ????????? ?????? ????, ?? ???? IIS ????? ?? ??????? ???? ?? ?? ???? ?? ????????? ????:
#include <stdio.h>
int main()
{
  printf("Location: %s\r\n", "http://www.yahoo.com");
  printf("Set-Cookie: Name1=Value1; path=/;
    expires=Fri, 22 May 1998 21:00:00 GMT\r\n\r\n");
  return 0;
}

CGI ????????? ?? ???? ??????? ?? ??? ?? ???? ?????? (??????? ??????, ?????? ?? ???) ?????? ???? ???? ?? ?? ?? ???? ????:
HTTP/1.0 302 Object moved
Location: http://www.yahoo.com
Server: Microsoft-IIS/2.0
Content-Type: text/html
Content-Length: 145

<head><title>Document moved</title></head>
<body><h1>Object Moved</h1>This document may be found
<a HREF="http://www.yahoo.com">here</a></body>

????? ??? ?? ???-???? ????? ??? IIS ?????? ???? ???? ??? ??? ??? ???? ??? ???? ?????????? ???? ???????? ??? ???? ??, ?? ??? ??????? ????? ???? ???

???? ?? ??? ?? ???? 302 ??????????? ??? ??? ???? ?? ???, ????? ?? ?????? "nph-" ???????? ????? ????? ?? ??? ?? ???? ??? ?? ????? ????:
#include <stdio.h>
int main()
{
  printf("HTTP/1.0 302 Redirect\r\n");
  printf("Location: %s\r\n", "http://www.yahoo.com");
  printf("Set-Cookie: Name=Value; path=/; expires=Fri, 22 May 1998 21:00:00
   GMT\r\n\r\n");
  return 0;
}

?????? ?? ????? ?? ???? ???? ??? ????? ??? ?? ?? ???? ???? ??, ?? ????? ?????? ??? ????? ??? ??? ???? ???? ????
HTTP/1.0 302 Redirect
Location: http://www.yahoo.com
Set-Cookie: Name=Value; path=/; expires=Fri, 22 May 1998 21:00:00 GMT
????? ?? ???? ????

??????

(?) Microsoft Corporation 1997, ??? ?????? ????????? ???????? ?? ???? Braginski, Microsoft Corporation ?? ??????
????? ?? ???? ????
???? ???? ???? ??:
  • Microsoft Internet Information Server 3.0
  • Microsoft Internet Information Services 5.0
????? ?? ???? ????
??????: 
kbbug kbnofix kbmt KB176113 KbMthi
????? ?? ???? ????
???? ?????? ???????????? ?????? ????????
??????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??.
?????????? ?? ??????? ????????? ??????? ??:176113  (http://support.microsoft.com/kb/176113/en-us/ )
????? ?? ???? ????