FIX: IP ??? ?? revealed IIS 6.0 ??? TCP ????? ??? ??? ' ???????-????? ' ????? ???

???? ID: 834141 - ?? ???????? ?? ?????? ??? ?? ?? ???? ???? ???? ??.
???? ?????? ???????????? ?????? ???????? KB ?? ???????? ????? ?? ??? ???? ????? ????
???????????? ???? ??? ??????? ?? ?????? ???? ???? ?? ???? ??? ??????? ??? ??????? ?????? ???? ?? ???? ???? ???? ?? ???? ??? ?? ????? ????? ?? ?? ??? ?????? ??? ?? ??? ???????????? ?? ???? ???? ??? ???? ?? ??? ???? ???? ?? ???? ??? ??????? ?? ??? "??????????? ?????/????????????" ??? ???? Microsoft ??????? ????? (MMC) ??? ??????
??? ?? ??????? ???? | ??? ?? ??????? ????

?? ????? ??

?????

?? Microsoft ??????? ?????????? ???????? (IIS) ?? ???? ???? ????? ????? ??? GET ?????? ??????? ???? ??, ??? ????? ???????-????? ????? ?? ??????????? ??? TCP ????? ??? ??? ' ????? ' ????? ??? ????? ?? IP ??? ??????? ?? ???? ??? ?? ?????? ?? ?? ???? ?? ??? ?????? ??? ??? ????? ??? ???? ?? ?? ??? IIS ???? ????? ?? ??? ??? ?????? ?? ?????????????? ?????
????? ?? ???? ???? | ??????????? ???

????

?? ?????? ???? ?? ??????? ?? IIS GET ?????? ???? ??? ????? ????? ??? ??????? ???? ??, IIS ???? ????? ??? ????? ??? ?? ????? ??? ??? IP ??? ???
????? ?? ???? ???? | ??????????? ???

????????

?????? ??? ???????

?? ?????? ?? ?? ???? ?? ??? Microsoft Windows Server 2003 ?? ??? ?????? ?????? ??? ??????? ????? ???? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????::
889100
(http://support.microsoft.com/kb/889100/ )
Windows Server 2003 ?? ??? ?????? ?????? ??? ???? ??????? ????
???????????????? ??? ?? ??????? ???? ?? ??? ?? ??? ???? ???? ?? ??UseHostName??? ??SetHostName??? ?? ????? ??? ?? ?????? ?? ??? ???? ???? ?? ??? ??? ???????? ????? ???, ???? ?? ???? ??? ???? ?? ??? ???? ???? ?? ???? ??? ??????? ?? ??? ????? ""????

???????? ???????

?? Microsoft ?? ?? ??????? ???????? ?????? ??.. ??? ?? ???????, ???? ?????? ?? ?????? ?? ?? ???? ??? ????? ???? ??? ??? ???? ????? ???????? ?? ???? ???? ?? ?? ??????? ?????? ?? ????? ?? ??? ???.. ?? ???????? ?? ??? ???????? ??????? ??? ?? ???? ???.. ?????, ??? ?? ?? ?????? ?? ???? ??? ???????? ???? ???, ?? ?? ????? ????? ?? ?? ???? Windows Server 2003 ?????? ??? ?? ????????? ???? ?????? ?? ???????? ????? ??..

?? ?????? ?? ????? ?? ????, ?? ???????? ??????? ???? ?? ??? Microsoft ?????? ?????? ???? ?? ?????? ????? Microsoft ?????? ?????? ???? ?? ??? ?????? ?? ?????? ????? ?? ???? ??? ??????? ?? ???? ????, ?? ??? ????? Microsoft ??? ???? ?? ????:
http://support.microsoft.com/contactus/?ws=support
(http://support.microsoft.com/contactus/?ws=support)
???:????? ?????? ???, ?? ????? ?? ?????????? ?????? ???????? ?? ???? ???? ??? ???? ??? ?? ???? ???, ??? ??? Microsoft ?????? ????????? ????????? ???? ?? ?? ??? ??????? ?????? ???? ?????? ?? ?????? ?? ???? ??.. ???????? ?????? ???????? ?? ?? ???????? ?? ??? ??????? ?????? ????? ???? ????? ?? ?? ??????? ?????? ?? ??????? ???? ????..

??????????????

???? ?? ??? ?? ???????? ???? ??..

???? ??????? ????????

?? ???????? ?? ???? ???? ?? ??? ???? ???????? ?? ???????? ???? ????..

??????? ???????

?? ???????? ???? ???? ?? ??? ?? ??? ???? ???? ?? ??UseHostName??? ??SetHostName??? ?? ????? ??? ?? ?????? ?? ??? ???? ???? ?? ??? ??? ???????? ????? ???, ???? ?? ???? ??? ???? ?? ??? ???? ???? ?? ???? ??? ??????? ?? ??? ????? ""????

????????? ???????????? ???????

?? ???????? ???? ?? ???????? ?? ???????????? ???? ????..

????? ???????

?? ????????? ?? ????????? ??????? ??? ?? ????? ????????? (?? ??? ?? ????? ?????????) ??? ?? ????? ?????? ??? ???????? ???.. ?? ??????? ?? ??? ?????? ?? ???, ??????? ????????? ??? (UTC) ??? ???????? ??.. ?? ?? ????? ??????? ????? ???, ?? ?? ??????? ??? ??? ?????? ???? ???? ??.. "UTC ?? ??????? ??? ??? ???? ????? ?? ???, ???????? ??? ??? ""?????? ?? ??? ???"" ??? """"??? ???????"" "??? ????????? ?? ??????????? ???? ??? ???? ???
   Date         Time   Version      Size       File name
   ------------------------------------------------------
   10-Dec-2003  18:07  6.0.3790.91  1,124,352  Iiscfg.dll
   10-Dec-2003  18:07  6.0.3790.91    299,008  W3core.dll
????? ?? ???? ???? | ??????????? ???

??????

Microsoft ?? ?????? ?? ?? ?? ?? ?? Microsoft ???????? ??? ?? ?????? ?? ?? "???? ???? ???? ???" ?????? ???????? ???.. ?? ?????? ?? ???? ???? Windows Server 2003 ?????? ??? 1 ??? ??? ???? ??? ???
????? ?? ???? ???? | ??????????? ???

???? ???????

???????:??? ?? ??????? ??? ??? ?? ??????? ???, ?? ?? ??????? ?? ????? ???? ?? ?? ???? ?? ?????? ???????????? ???? ?? ???????? ?? ????? ?????? ?? ???? ?? ???? ???? Microsoft ?? ?????? ???? ?? ?? ??? ?? ??? ??????? ?????? ?????? ???????? ?? ?? ???? ?? ?? ???? ???? ??????? ?? ???? ????? ?? ??????? ?????

???:????? ?? ??? ?? ??? ??????? ??????? ???? ?? ?????

After you install the service pack or apply this hotfix, you must set either theUseHostName??? ??SetHostNameproperty on the site if you want an alternate host name to be sent for requests. By default, the same value as the HTTP_HOST variable is sent in the SERVER_NAME variable.

???:If you enable one the following settings, IIS will always use an alternate name for the SERVER_NAME variable.

The data type for theUseHostNameproperty is Boolean. TheUseHostNameproperty will instruct IIS to always replace the SERVER_NAME variable with the fully qualified machine name.

Optionally, you can set theSetHostName???? The data type for theSetHostNameproperty is string. ?????SetHostNameproperty if you must specify a host name that is different from the computer name. TheSetHostNameproperty assumes that you want this alternate host name. TheSetHostNameproperty will cause IIS to ignore theUseHostName??????? You do not have to set theUseHostNameproperty if theSetHostNameproperty is present.

A Web server administrator may use the Adsutil.vbs tool to modify theUseHostNamemetabase property and theSetHostNamemetabase property.

Option 1: Set the UseHostName property

??? ???? ?? ???UseHostName??? ?? ???, ????? ????? ?? ???? ????:
  1. ????? ????,???????????? ????,???????????:cmd?? ????-????? ????, ?? ???? ???OK?? ??????? ????????? ??????
  2. Change to the folder where the Adsutil.vbs tool is located. By default, this folder is the following:
    % SYSTEMROOT %\Inetpub\AdminScripts
  3. Type the following command, wherexis your site identifier:
    cscript adsutil.vbs set w3svc/x/ UseHostName ????

?????? 2: SetHostName ??? ??? ????

??? ???? ?? ???SetHostName??? ?? ???, ????? ????? ?? ???? ????:
  1. ????? ????,???????????? ????,???????????:cmd?? ????-????? ????, ?? ???? ???OK?? ??????? ????????? ??????
  2. ??????? ???? Adsutil.vbs ????? ????? ?? ????????? ????? ???????? ??? ??, ?? ?????? ?? ?????:
    % SYSTEMROOT %\Inetpub\AdminScripts
  3. ????? ???? ???? ???? ????x???? ???? ?????????? ?? ?????????????????? ????? ??? ?? ????? ???? ????? ??:
    CScript adsutil.vbs ??? w3svc /x/ SetHostName????????

Mitigating ???

??? ???? ?? ???UseHostName??,SetHostNameIIS 6.0 ??? ???, ?? ????? ?? IP ??? ???? HTTP ???????? ??? ????? ?? ??? ??? ?? ???? ??? ???????? ??? ??, ?? ???? ??? ?? ??? ?????? ??????????? ?? ?? ????? ???? ??? ?? ?? ???? ?? ?????? ??? ?????? ?? ???, ??? ?? ???????? ??? ??? HTTP 302 ???????? ???? ???? ???? HTTP ???????????? ???????? ????, ?? ???????????? ??? ???? ????? ?? IP ??? ?? ????? ???? ??, IP ??? ??? ???? ???????-????? ?? ??????????? ?? ????? ????? ??? ??? ??? ?? ?????? ?? ?? ???? ?? ??? ????? ? ????? ?? IP ??? ??? ???????????? ?????? ???? ????, ???? ????? ??? ?? ???? ??? ??????????? ???? ??? ?? ????? ?????

??????? ?? ?? ???? ?????? ?? ???? ?? ??? ?? ???????????? ?????? ?? ?? ????? ?? ???? ???? URL ?? ??? ??? ??? ???? ?? ??? IIS ??????? ?? ????? ???? ?? ????? ?????? ??????? ?? ???? ???????????? ???????? ???? ?? ??? ???????? ????? ?? ???????? ??? ???? ??? IP ??? ?? ???? ?? ??? URL ?? ???? ????? ????????? ?????

????? ?? IP ??? ???? ??? ?? HTTP ???????? ?? ?? ?? ?? ???? ??? ??? ????? ????????? ???? ???:
  • ??????? HTTP ?????? ???? HTTP:Host ???? ??? ?? ????? ???? ????
  • IIS ??? SF_NOTIFY_PREPROC_HEADERS ????? ?? ????? GetServerVariables(servername) ???? ?? ??? ??? ???? ?? ?? ISAPI ??????? ?? ???????? ???? ??? ???
??? ???? ?? ???? IIS ??????????? ????; ???? ??? PREPROC_HEADERS ?? ??? ???? ???? ?? ??????? ?? ?? ?????? ???, UseHostName ?? SetHostName. ?????, ?? ?? ??? IP ??? ?? ???? ???? ?? ????? ??? ???? ??????? ?????? ??? ???? ????? ?? ??? ?? ?? PREPROC_HEADERS ??? GetServerVariables(servername) ??? ??? ?? ??, ??? SERVER_NAME ??????? ????? ????? ??? ?? ??? ??? ?? ?????? HTTP/1.1 ??? ????????? ??? ???? ?????? ???? ????? ????? ??? ????? ???? ?????? ??? ?????, ?? ???????? HTTP ?????? ????? ???? ??? ?? ?? ???? ??? ??????? ?? ????? ?? ???? ??? ??????? HTTP/1.0 ?? ????? ???? ?? ?? ???? ?? ?????? ???? ?? ?? ???? ?? ??? ?? ???? ??????? ???

?????????? ?????? ???????? ?? ???? ??? ???? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????::
824684
(http://support.microsoft.com/kb/824684/ )
Microsoft ?????????? ???????? ?? ????? ???? ?? ??? ????? ?? ???? ???? ???? ???????? ?? ?????
????? ?? ???? ???? | ??????????? ???

???

???? ID: 834141 - ????? ???????: 05 ?????? 2010 - ??????: 2.0
???? ???? ???? ??:
  • Microsoft Internet Information Services 6.0
??????: 
kbhotfixserver kbfix kbbug kbqfe kbwinserv2003presp1fix kbmt KB834141 KbMthi
???? ?????? ????????
??????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??.
?????????? ?? ??????? ????????? ??????? ??:834141
(http://support.microsoft.com/kb/834141/en-us/ )
????? ?? ???? ???? | ??????????? ???

??????????? ???

 
????? ?? ???? ????????? ?? ???? ????