???? URLScan ?? ???? ??? ???? ????? ?? Outlook Web Access

?????? ????????? ?????? ?????????
???? ???????: 325965 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

???????

??? ??????? Microsoft Outlook ??? Access (OWA) ? ?? ?????? ???? ?? ???? ?? ??????? ???????:
  • ??? ???? ?????? ??? ???? ???? ?????? ???? ???? ????? "?????..." ??? ????? ???? ????? ???????. ??? ????? ??? ???????? ???????? ?????? ????. ??? ??? ?????? OWA ?? Netscape Navigator ??? ???? ?????? ????????? ???????? ??? ??? ???? ???????.
  • ??? ?????? ????? ?????? ????? ????? ????? ???????:
    ???? ?????? ??? ??????. ???? ?? ????.
  • ??? ?????? ??? ??????? ???? ????? ??? ?????? ?? ?????? ??????? ????? ????? ????? ??????? ?? ???????? ????? ??:

    ?? ???? ?????? ??? ??????

    ???? ??? ????? ?????? ???? ???? ???? ?? ???? ????? ?? ??? ????? ??????.

    ?????? ?????? ?? ???:

    -??? ??? ?????? ????? ?????? ?? ???? ????????? ???? ?? ??? ??????? ???? ????.

    -???? ?????? ???????? <server>??? ?? ???? ?? ???????? ??? ????????? ???? ??????.

    -???? ??? ???? ????? ??????? ?????? ???.

    ????? - HTTP 404 ?? ??? ??????

?? ????? ???? ??? ????? ???? ??????? ??? ??? ??????? ?? ????? ??????? ???? ??? ??? ??????? ??? ?????? ????? ??? OWA.

?????

???? ?????? ????? ??? ??? ??? ?? ??? ?????? ???? URLScan ??? ???? ??? ??? ??? ????? OWA ? ?? ??? ????? ????????? ??????????.

?????? ??? ???? ?? ????????? ??? ???? URLScan ?? ?????? ???? Microsoft ?????? ??? ?????:
???? ?????? URLScan ??????? 2.0
http://technet.microsoft.com/en-us/security/cc242650.aspx

????

??? ??? ???????? ?????? ???? ????? ???????.

??????? 1: ??????? URLScan ?????

?????? ??????? URLScan ?????? ?????? ??? ? ??????? ??????? (WebDAV) ???????? ?????? ??????? ???????? ??? ???? ??????? (HTTP) ??? URLScan ????? ????? Urlscan.ini. ?????? ??? ??????? ?????? ??? ????? ????? ??? Urlscan.ini ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
309508IIS Lockdown URLScan ????????? ?? ???? Exchange

??????? 2: ????? ???? URLScan

?????? ???? URLScan ???? ??????? ???????:
  1. ???? ??? ???? ? ???? ??? ??????? ?? ???? ??? ???? ??????.
  2. ???? ????? ??????? ??? ????? ?? ????? ???????.
  3. ???? ??? 2.0 ???? UrlScan IIS (????? ?????) ?? ???? ??? ?????/?????.
  4. ???? ??? ??? ?????? ????? ????? ??????? ?????? (IIS).
  5. ???? ??? ????? ?????? ???? ??? ??? URLScan ?? ???? ??? ?????.

??????? ????

???? ???????? ??? ???? URLScan ?????? ??? ??????? ???? ????? ??? ?????? ??????? ?? ?????? ??????? ??????? ???????:
   ..  ; Does not allow directory traversals
   ./  ; Does not allow trailing dot on a directory name
   \   ; Does not allow backslashes in URL
   :   ; Does not allow alternate stream access
   %   ; Does not allow escaping after normalization
   &   ; Does not allow multiple CGI processes to run on a single request
				
?????? ?? ???? ????? ".."???"../ "? ????? ????? ?? ?????? ? ????? ????? ?????? ?????????? ???? ??? ????? ????? (...) ?? ???????. ?????? ??? ??????? ?????? ??? ???? URLScan ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
309508????? IIS ???????? URLscan ?? ???? Exchange

???????

???? ???????: 325965 - ????? ??? ??????: 13/????/1428 - ??????: 4.8
????? ???
  • Microsoft Exchange Server 2003 Standard Edition
  • Microsoft Exchange Server 2003 Enterprise Edition
  • Microsoft Exchange 2000 Server Standard Edition
  • Microsoft Exchange Server 5.5 Standard Edition
????? ??????: 
kbmt kbprb KB325965 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????325965

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com