Telnet Session to IIS Causes Access Violation in Inetinfo.exe

ID: Q160571

The information in this article applies to:

Microsoft Internet Information Server versions 1.0, 2.0

SYMPTOMS

If you test a Microsoft Internet Information Server (IIS) with TELNET, and you issue the following command, the server will access violate in Inetinfo.exe:

GET ../..

CAUSE

This is caused by an error in the Internet Information Server code that fails when there is no leading "/".

MORE INFORMATION

Microsoft has confirmed this to be a problem with Microsoft Internet Information Server versions 1.0 and 2.0. This problem was corrected in U.S. Service Pack 2.0 for Microsoft Windows NT 4.0. For information on obtaining the Service Pack, query on the following word in the Microsoft Knowledge Base (without the spaces):

S E R V P A C K

Additional query words: sp2

Keywords : kberrmsg iissecurity
Version : Winnt:1.0,2.0
Platform : winnt
Issue type : kbbug