Page Contents Visible When Certain Dot Extensions Present in the Virtual Directory Name

ID: Q238606

The information in this article applies to:

Microsoft Internet Information Server version 4.0
Microsoft Site Server version 3.0
Microsoft Site Server version 3.0, Commerce Edition

SYMPTOMS

If either .com, .exe, .dll, .cgi or .sh are at the end of a physical directory name that is present in a virtual directory, the contents of the page pointed to by the URL are returned to the browser. If the URL points to an Active Server Page (ASP) page, the contents of the ASP script file are returned to the browser instead of the processed results of the ASP page.

RESOLUTION

The following files are available for download from the Microsoft Download Center. Click the file names below to download the files:

US English:
x86: Vrdcon4i.exe
Alpha: Vrdcon4a.exe
Simplified Chinese:
x86: Vrdcon4i.exe
Alpha: Vrdcon4a.exe
Traditional Chinese:
x86: Vrdcon4i.exe
Alpha: Vrdcon4a.exe
German:
x86: Vrdcon4i.exe
Alpha: Vrdcon4a.exe
Japanese:
x86: Vrdcon4i.exe
Alpha: Vrdcon4a.exe
Korean:
x86: Vrdcon4i.exe
Alpha: Vrdcon4a.exe

For more information about how to download files from the Microsoft Download Center, please visit the Download Center at the following Web address

http://www.microsoft.com/downloads/search.asp

and then click How to use the Microsoft Download Center.

The English-language version of this fix should have the following file attributes or later:


   Date      Time                   Size    File name     Platform
   ---------------------------------------------------------------
   10/15/99  04:00p               329,024 Asp.dll         x86
   10/15/99  03:58p               184,736 Infocomm.dll    x86
   10/15/99  03:59p                11,248 Iwrps.dll       x86
   10/15/99  03:59p                38,256 Ssinc.dll       x86
   10/15/99  03:59p               228,464 W3svc.dll       x86
   10/15/99  03:59p                87,504 Wam.dll         x86

   10/15/99  04:00p               549,648 Asp.dll         Alpha
   10/15/99  03:58p               303,888 Infocomm.dll    Alpha
   10/15/99  03:59p                16,656 Iwrps.dll       Alpha
   10/15/99  03:59p                60,176 Ssinc.dll       Alpha
   10/15/99  03:59p               383,760 W3svc.dll       Alpha
   10/15/99  03:58p               149,264 Wam.dll         Alpha

STATUS

Microsoft has confirmed this to be a problem in Internet Information Server 4.0.

MORE INFORMATION

For related information about this problem, please visit the following Microsoft Web site:

http://www.microsoft.com/security/bulletins/MS99-058.asp

For additional security-related information about Microsoft products, please visit the following Microsoft Web site:

http://www.microsoft.com/security/

Additional query words: iisscript asp iiswww iisvirtual

Keywords : NT4SP6Fix kbIIS
Version : winnt:3.0,4.0
Platform : winnt
Issue type : kbbug