????? ????? URLScan ?????? ??????? ??? ASP.NET

???? ???????: 815155 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???????? ????? ????? ??????? ?????? ?????? ???????
???? ???? ????? ?????????? ??????? ??? Microsoft ????? ??????? ?????? (IIS) ??????? 7.0 ????? Microsoft Windows Server 2008. IIS 7.0 ????? ???? ?????? ??????? ??? ???? ?????. ????? ?? ????????? ??? ???????? ??? ????? ??????? IIS ?? ?????? ???? Microsoft ?????? ??? ?????:
http://technet.microsoft.com/en-us/library/dd450371.asp
(http://technet.microsoft.com/en-us/library/dd450371.aspx)
????? ?? ????????? ??? IIS 7.0 ?? ?????? ???? Microsoft ?????? ??? ?????:
http://www.iis.net/default.aspx?tabid=1
(http://www.iis.net/default.aspx?tabid=1)

?? ??? ??????

????? ???? | ?? ????

?? ??? ??????

??????

???? ??? ??????? ???? ????? ??? ????? ????? ???? ?????? URLScan ?????? ??????? ??? ASP.NET.

??? URLScan ???? ????? API ???? ?????? (ISAPI) ????? ????? ??????? ????? HTTP Internet Information Server 4.0 ? 5.0 ?????? ??????? ?????? ? 5.1 ????? ??????? ?????? (IIS). ??? ??????? URLScan ?????? ?????? IIS ??? ????? ?????? ?? ??????.

?????????? ?? ???? URLScan accommodations ???? ?? ??? ?????? ????? ??????? ???? ?????? ??????? ??? ASP.NET. ????? ????? ????? URLScan ?????? ???? ?????? ?? ?????? ??? ?????????. ??? ???? ????? ?? ????? ?????? ??? ??? ????? ???? ????? ??????? "?" ????? XML Web "?" ??????? ?? ????.

back to the top

????? URLScan

?????? URLScan ?????? ???????? ASP.NET ?????? ????? ??????? ???? ?? ?????????? ??? ???? ??????? ???????:
  1. ????? ???? URLScan. ?????? ??? ??????? ???????? ?? ?????? ???? Microsoft ?????? ??? ?????:
    http://technet.microsoft.com/en-us/security/cc242650.aspx
    (http://technet.microsoft.com/en-us/security/cc242650.aspx)
  2. ??? ??? Urlscan.ini ?? ???? ?? (??? ???????). ???? ??? ????? \ ?????? \System32\Inetsrv\Urlscan\ System Root.
  3. ?? ?????? [AllowExtensions] ? ????? ?????? ????? ??????? ???????:
    • .ashx
    • .aspx
  4. ?? ?????? [DenyExtensions] ? ????? ?????? ????? ??????? ???????:
    • .asax
    • .ascx
    • .config
    • .cs
    • .csproj
    • .dll
    • .licx
    • .pdb
    • .resx
    • .resources
    • .vb
    • .vbproj
    • .vsdisco
    • .webinfo
    • .xsd
    • .xsx
  5. ?????? ?? ???? ????? ??????? ????? ???? ??? ????? .axd ??? ?????? [AllowExtensions]. ??? ?? ??? ???? ????? ???? ????? ??????? ????? .axd ??? ?????? [DenyExtensions].
  6. ?????? ????? ??? ????? ???? ??? ????? .asmx ??? ?????? [AllowExtensions]. ??? ?? ??? ???? ?????? ????? ??? ????? .asmx ??? ?????? [DenyExtensions].
  7. ?????? "??????? ?? ????" ? ?? ?????? ???? ??? ????? .rem ????? ??? ????? .soap ??? ?????? [AllowExtensions]. ??? ?? ??? ???? ????? ??????? ?? ???? ????? .rem ? .soap ??? ?????? [DenyExtensions].
  8. ???? ????? ????? Urlscan.ini ??. ??? ????? ????? IIS ????? ????????? ????? ???????.
?????? ?? ????? ??? ??????? ?????? ??????? ?????? ??? ????? ?? ?? ??? ?? ????? ??????? UseAllowVerbs ?? URLScan.

back to the top
???? ??? ?????? | ????? ???????

?????

????? ?? ?????????? ???? ??? ????? ???????? ??????? ?????? ?? "????? ??????? ?? Microsoft:
315736
(http://support.microsoft.com/kb/315736/ )
????? ????? ??? ??????? ASP.NET ???????? Windows ??????
315588
(http://support.microsoft.com/kb/315588/ )
????? ????? ??? ??????? ASP.NET ???????? ?????? ??????
818014
(http://support.microsoft.com/kb/818014/ )
????? ????? ????????? ???? ?? ??????? ??? ?????? .NET Framework
back to the top
???? ??? ?????? | ????? ???????

???????

???? ???????: 815155 - ????? ??? ??????: 29/????? ???????/1429 - ??????: 6.4
????? ???
  • Microsoft ASP.NET 1.0
  • Microsoft Internet Information Services version 5.1
  • Microsoft Internet Information Services 5.0
  • Microsoft Internet Information Server 4.0
  • Microsoft ASP.NET 1.1
????? ??????: 
kbmt kbscan kbsecurity kbconfig kbweb kbhowtomaster KB815155 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????815155
(http://support.microsoft.com/kb/815155/en-us/ )
???? ??? ?????? | ????? ???????

????? ???????

 
???? ??? ?????????? ??? ??????