????? SSI ????? ??? ????? ????? ??????? ??????

?????? ????????? ?????? ?????????
???? ???????: 318176 - ??? ???????? ???? ????? ????? ??? ???????.
??? ????? ??? ???????. ????? "??? ??" ??? ??? ??????? ??? ????.
???? ???? ????? ?????????? ??????? ??? Microsoft ????? ??????? ?????? (IIS) ??????? 7.0 ????? Microsoft Windows Server 2008. IIS 7.0 ????? ???? ?????? ??????? ??? ???? ?????. ????? ?? ????????? ??? ???????? ??? ????? ??????? IIS ?? ?????? ???? Microsoft ?????? ??? ?????:
http://www.microsoft.com/technet/security/prodtech/IIS.mspx
????? ?? ????????? ??? IIS 7.0 ?? ?????? ???? Microsoft ?????? ??? ?????:
http://www.iis.net/default.aspx?tabid=1
????? ???? | ?? ????

?? ??? ??????

???????

????? ?????? ??????? ?? ???? ?????? (SSI) ???????? <!----> #exec cgi ????? ????? ??? ???? ???? ?????? ??? Microsoft Windows NT 4.0 ?? Service Pack 4 (SP4) ?? ??????? ?????? ?? ????? Microsoft Windows 2000 ?? Service Pack 2 (SP2) ?? ??????? ?????? ????? ???????? ?? ???? ??? ??????. ??? ??? ?????? ???????? ???? ??? ???? unpatched ???? ??????? ??? ?? ?????.

?????

??? ????? ??? ?????? ??????? ??? ????? ??????? ?????? (IIS) ????? ?? ?????? SSI ???? ?? ??????? ???????? <!----> #exec cgi ????? ?? ???? ??????? ????? ???????? ??????? (CGI). ????? ??? ????????? ????? CGI ?????? ??? HTTP ??? ??????? ??? ??????? ??????. IIS ?????? ??? ????? ???? ?? ?????? ?? ??????? ??????? ???????? ???? ???? ??? ??????. ??? ?? ??? ???????? SSI ????? ??? ????? ? ???? ???????? IIS ???? ?? ???? ?? ?? ??????? ????? ??. ??? ????? ?? ???? ????????? ??????? ?? Windows ???? ?? ????? ??? ?????? ???? ???? ?? ???? HTTP ????? ??? ?????? ??? ???? ??????? ?? ?????? SSI.

????

????? ??? ??????? ???? ????? ????????? ?????????:
  1. ????? ???????? ???????? <!----> #exec cmd ??????? ????? ?? <!----> #exec cgi ?????. - ?? -

  2. ????? ????? ???????? ??? ????? ?????? ??????? ????? ??? ???? ??? ?? ????? ???????:
    ??? ???????: text/html

?????

????? ??? ?????? ??? ???????.

??????? ????

?????? SSIs ???? ??????? ???????:
  1. ???? ?? ?????? ???? ????? (ISM), ???? ?????? ???????? IIS ???????? ?? Microsoft (MMC).
  2. ?? MMC, ???? ????? ??????? ??? ??? ????????? ????? ?? ?? ????? ??????.
  3. ???? ????? ??????? ??? ???? ??? ???? ???? ????? SSI.
  4. ???? ??? ?????? ?????? ??? ?????? ??????? ??? ????? ??? ??????? ????? SSI. ?????? SSI ?????? ??????? ????? ???, ???? ??? ?????? ?????? ??? ???? ???.
  5. ???? ??? ????? ?? ???? ??? ????? ??????? ?????? ???????.
  6. ??? ?????? ??????? ? ???? ?????? ??????? ?????? ? ???????.
  7. ???? ??? ?????. ???? ?? ????? ?? ??????? ???? ????? ????? ?? ????? ??? SSI ?? ?????? Overrides ???????.?????? ??? ??????? ?????? ??? ????? ????? <!--cmd #exec--> ?????, ???? ??? ??? ??????? ????? ?????? ?? "????? ??????? ?? Microsoft:
    233969SSIEnableCmdDirective ????? ??? FALSE ??? ?????????

????? ????? ????? ?? ????

  1. ????? ?? ???? ?????? ????? ?????? ??????? ????? ??? ?????????.
  2. ????? ???????? C ?????? ??? ???? Windows NT 4.0 ?? Windows 2000 unpatched:
    #include <stdio.h>
    int main(int argc, char **argv) {
      printf("Hello World\n");
    
    }
  3. ??? ????? ?????? ??????? Helloworld.exe ?? ?? ???? ????? ?? ?????? ????? ????? ???. ??? ?????? ???? ??????? C:\Inetpub\Wwwroot.
  4. ????? ???? HTML ????? SSI ??????? ??? ?? ?? ???? ?????? ???? Ssitest.shtm ?? ?????? ????? ????? ???:
    <HTML><BODY>
    Exec cmd: <!--#exec cmd="c:\inetpub\wwwroot\HelloWorld.exe"--><BR>
    Exec cgi: <!--#exec cgi="/HelloWorld.exe"-->
    </BODY></HTML>
  5. ?????? ?????? ??? http://localhost/ssitest.shtm ??? ???? ??????? ???? ????? ??????? Windows NT 4.0 Service Pack 3 (SP3) ?? ????????? ??????? ?? ?? Windows 2000 Service Pack 1 (SP1) ?? ????? ????. ???? ??????:
    Exec cmd: Hello World
    Exec cgi: Hello World
  6. ????? Windows NT 4.0 SP4 ?? ??????? ?????? ?? Windows 2000 ?????? ????? ?????? SP2 ?? ???? ??? ?????????.
  7. ?????? http://localhost/ssitest.shtm ??? ????. ????? ???? ???? ?? ???:
    Exec cmd: Hello World
    Exec cgi:
  8. ????? ????????? ???????? ?? Helloworld.exe ?????? ??? Content-Type ????? ?? ????? ????? ?????:
    #include <stdio.h>
    int main(int argc, char **argv) {
      printf("Content-type: text/html\n");
      printf("Hello World\n");
    
    }
  9. ????? ????? http://localhost/ssitest.shtm ??? ???? ??????? ???? ????? ??????? Windows NT 4.0 SP4 ?? ??????? ?????? ?? Windows 2000 ?????? ????? ?????? SP2 ?? ????. ????? ???? ???? ?? ???:
    Exec cmd: Content-type: text/html
     Hello World
    Exec cgi: Hello World
    ????????? ???? ???? <!----> #exec cgi ????? <!----> #exec cmd ????? ?? ???? ??? ????? ?? ???? CGI ?? ???????.

?????

????? ?? ????????? ??? SSIs ???? ??????? "????? ???? ??????" ?? ??????? ??????? IIS. ???? ??? ???????? ???? ????? ? ??? ???? ????? ????? ??? ??? ?? ???? ???? ????? ???? ??????. ??? ?????? ????? ?? ???? URL ?????? ?? ?? ??????? ??????? ??????? IIS ?? ????? IIS ?????:
http://localhost/iishelp

???????

???? ???????: 318176 - ????? ??? ??????: 29/???? ?????/1435 - ??????: 3.1
????? ???
  • Microsoft Internet Information Services 5.0
  • Microsoft Internet Information Server 4.0
????? ??????: 
kbnosurvey kbarchive kbmt kbpending kbprb KB318176 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????318176

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com