????? ?????? ??????? ?? ?????? ??????? ?????? ?? ASP.NET

?????? ????????? ?????? ?????????
???? ???????: 887459 - ??? ???????? ???? ????? ????? ??? ???????.

????? ?????????

??? ????? ????????? ???????? ?? "????? ??????? ?? Microsoft"??? ??"??? ???? ?? ?? ???. ??? disclaim ?????? ???? ???? ????? ?? ????? ??? ?? ??? ?????? ???????? ??????? ? ???????? ???? ????. ??? ????? ???? Microsoft ?? ??????? ????? ?? ??? ????? ????? ??? ?? ??? ????? ?? ??? ????? ? ??????? ?? ????????? ? ??? ????? ??????? ?? ????? ???? ??? ?? ?? ????? ???? Microsoft ?? ??????? ???????? ???? ??? ??? ???????. ?? ???? ??? ???????? ???????? ?? ????? ????????? ?? ??????? ??????? ?? ???????. ?????? ????? ?????.
????? ???? | ?? ????

?? ??? ??????

????? ???

???? ??? ??????? ????? ????? ??????? ?????? ??? ??? ??????? ASP.NET ???????? ?? ??????? ?? ?????? ??????? ???????.

??????? ????

?? ??????? ?? "???????" ?

??????? ?? ??????? ???? ???? ????? ??????? ????? ?????? ?? ??? ??? ?????? ??? ??? ????? ????. ???? ????? ?? ??? ????? ???? ????? ???????. ??? ???? ??????? ??? ??????? ???? ?? c:\dir\test.dat ????? ?? test.dat, ?\..?? ???? \test.dat ?? ?????? ??? ??? ?????. ??????? ?? ????? ???? ??? ????? ???? ????? c:\dir\test.dat.

??? ???? ???? ?????? ???? ??? ?????? ????? ????? ??? ???? ???? ????? ???? ???? ?????????. ??? ????? ??????? ???? ?????? ?? ????? ????? ???? ???? ????? URL ????? ???? ?? ?????? ??????? ??? ?????. ????? ?? ????????? ??? ??????? ?? ?????? ???? Microsoft ?????? ??? ?????:
http://msdn2.microsoft.com/en-us/library/aa302420.aspx
?? ???????? ??????? ???? ????????? ???? ?????????. ?????? ??? ???? ?? ?????????? ???? ?????? ??????.

????? ??????? ?????? ??????? ?????? ??? ????? ???

???? ???????? Microsoft ASP.NET ????? ?????? ?? ?????????? ???????? ?? ????? ?????? ??????? ?????? ?????? ??? ?? ???? ????? ????? ????? Application_BeginRequest ?? ??? Global.asax ?????? ??? ???? ?? ??????? ?? ?????? ????? ?? ????? ???. ????? ????? ????? ??? ??? ??? ???. ????? ????? ????????? ???????? ??? ????? ????? ??? ???????? ??? ??????? ?? ?????? ???????.

????? ????????? ????????

??? ????? ???????? ???????? ??????? ????? ????? ????? ????? Application_BeginRequest ??? ??? Global.asax. ????? ????? ????? ??? ??? ??? ???? ??? ????? ??????? ???? ?? ???? ????? verifications ??????. ????? ????? ???? ?????? ??????? ???????.

????? ????????? ???????? Global.asax (Visual Basic .NET)

<script language="vb" runat="server">
Sub Application_BeginRequest(Sender as Object, E as EventArgs)
    If (Request.Path.IndexOf(chr(92)) >= 0 OR _
        System.IO.Path.GetFullPath(Request.PhysicalPath) <> Request.PhysicalPath) then
        Throw New HttpException(404, "Not Found")
    End If
End Sub
</script>

????? ????????? ???????? Global.asax (C#)

<script language="C#" runat="server">
void Application_BeginRequest(object source, EventArgs e) {
    if (Request.Path.IndexOf('\\') >= 0 ||
        System.IO.Path.GetFullPath(Request.PhysicalPath) != Request.PhysicalPath) {
        throw new HttpException(404, "not found");
    }
}
</script>

???????

???? ???????: 887459 - ????? ??? ??????: 23/?? ??????/1428 - ??????: 2.5
????? ???
  • Microsoft ASP.NET 1.0
  • Microsoft ASP.NET 1.1
  • Microsoft .NET Framework 1.0
  • Microsoft .NET Framework 1.0 Service Pack 1
  • Microsoft .NET Framework 1.0 Service Pack 2
  • Microsoft .NET Framework 1.0 Service Pack 3
  • Microsoft .NET Framework 1.1
  • Microsoft .NET Framework 1.1 Service Pack 1
????? ??????: 
kbmt kbsecurity kbtshoot KB887459 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????887459

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com