Professional Web Applications Themes

Fix for: 'Server Application Unavailable' Error after Applying Security Update for IE - ASP.NET General

MS has posted this here: http://www.asp.net/faq/ms03-32-issue.aspx Fix for: 'Server Application Unavailable' Error after Applying Security Update for IE ------------------------------------------------------------------------------- - We have identified an issue with the recent MS03-32 Security Update for Internet Explorer security patch and ASP.NET V1.0 running on Windows XP. This patch can be installed manually or by obtaining recent critical updates from the Windows Update site. The symptom of this issue is that after installing the patch on a Windows XP machine, all requests to ASP.NET applications running on the local IIS 5.1 web server result in an error message saying "Server Application Unavailable". Requests to ...

  1. #1

    Default Fix for: 'Server Application Unavailable' Error after Applying Security Update for IE

    MS has posted this here:

    http://www.asp.net/faq/ms03-32-issue.aspx


    Fix for: 'Server Application Unavailable' Error after Applying Security Update
    for IE
    -------------------------------------------------------------------------------
    -

    We have identified an issue with the recent MS03-32 Security Update for
    Internet Explorer security patch and ASP.NET V1.0 running on Windows XP. This
    patch can be installed manually or by obtaining recent critical updates from
    the Windows Update site.

    The symptom of this issue is that after installing the patch on a Windows XP
    machine, all requests to ASP.NET applications running on the local IIS 5.1 web
    server result in an error message saying "Server Application Unavailable".
    Requests to remote web servers are unaffected.

    This issue only impacts installations running ASP.NET V1.0 on Windows XP. It
    does not impact machines running Windows 2000 or Windows Server 2003. It also
    does not impact machines running Windows XP with ASP.NET v1.1 installed.

    Please note that this issue is not a security bug with ASP.NET. It does not
    open up or allow any malicious attacks against an ASP.NET application or
    server. Instead, it is purely a functional bug caused by the patch itself.

    We are working hard on a permanent solution for this issue. In the meantime,
    you can execute the following batch file as a workaround for the issue. The
    batch file does the following:
    Stops the IIS and ASP.NET state services
    Deletes and recreates the ASPNET account with a known temporary password
    Uses the Windows runas command to launch an executable that creates an ASPNET
    user profile
    Re-registers ASP.NET. This creates a new random password for the account and
    applies default ASP.NET access control settings for it
    Restarts the IIS service




    The batch file contains a hardcoded temporary password of "1password" which
    you will be prompted to enter for the runas command when the batch file is run.
    After the runas command completes, the ASPNET account password is recreated
    with a strong random value. Note that the batch file may fail if the hardcoded
    password does not meet the password complexity requirements in your
    environment. If that's the case, you can change it to another value that is
    appropriate for your environment.

    Important note: If you have added custom access control settings or database
    account permissions for the ASPNET account, they will need to be recreated
    after this batch file completes. This is because when the account is
    recreated, it will get a new security identifier (SID).

    Important note: If you are running the ASP.NET worker process with a custom
    account other than the ASPNET account, then you should not run this batch file.
    Instead, you should log in interactively or use the runas command with that
    account which will create a user profile for that account.

    The batch file is included in the self-extracting archive below. To use it:

    You must be running as an account with Administrator privileges
    Download and open the self-extracting executable file
    Extract the contents to c:\
    Select Run... from the start menu, and enter cmd.exe
    In the open command windows, type c:\fixup.cmd.
    When prompted, enter 1password as the password.
    If you have previously custom access control settings or database account
    permissions for the ASPNET account, you'll need to re-apply these settings now.
    Ask questions and get answers in the Issues with 'Server Application
    Unavailable' error on Windows XP forum.
    Many apologies for the inconvenience that this has caused. We'll post
    additional information as it becomes available.

    The matrix below details platforms and versions impacted by this issue.

    ..NET Framework Version # Platform Affected
    Version 1.0 Windows 2000 Professional No
    Version 1.0 Windows 2000 Server No
    Version 1.0 Windows XP Professional Yes
    Version 1.0 Windows Server 2003 No
    Version 1.0 Windows XP Home with Cassini No
    Version 1.1 Windows 2000 Professional No
    Version 1.1 Windows 2000 Server No
    Version 1.1 Windows XP Professional No
    Version 1.1 Windows Server 2003 No
    Version 1.1 Windows XP Home with Cassini No


    Thanks,
    The ASP.NET Team





    Ken Guest

  2. #2

    Default Re: Fix for: 'Server Application Unavailable' Error after Applying Security Update for IE

    My pleasure!

    --
    Microsoft MVPs have a question for *you*: Are you patched against the Worm?
    http://www.microsoft.com/security/security_bulletins/ms03-026.asp



    "Jacob Yang [MSFT]" <microsoft.com> wrote in message
    news:phx.gbl...
    Hi Ken,

    Thank you very much for your help in this newsgroup.

    Best regards,

    Jacob Yang
    Microsoft Online Partner Support
    <MCSD>
    Get Secure! C www.microsoft.com/security
    This posting is provided "as is" with no warranties and confers no rights.


    Ken Guest

  3. #3

    Default Re: Fix for: 'Server Application Unavailable' Error after Applying Security Update for IE

    I've run the batch file, and now the login is failing for aspnet. Tried
    reinstalling it, but that doesn't work.

    Jon Cosby



    "Ken Cox [Microsoft MVP]" <ca> wrote in message
    news:#zBAB#phx.gbl... 
    Update 
    ----- 
    This 
    from 
    XP 
    web 
    It 
    also 
    not 
    meantime, 
    The 
    ASPNET 
    and 
    which 
    run. 
    recreated 
    hardcoded 
    is 
    database 
    custom 
    file. 
    that 
    it: 
    now. 


    Jon Guest

  4. #4

    Default Re: Fix for: 'Server Application Unavailable' Error after Applying Security Update for IE

    Hi Jon,

    Your best place for support on this issue is in the special group at
    www.asp.net where the ASP.NET team is handling the problems:

    http://www.asp.net/Forums/ShowForum.aspx?tabindex=1&ForumID=128

    Ken


    --
    Microsoft MVPs have a question for *you*: Are you patched against the Worm?
    http://www.microsoft.com/security/security_bulletins/ms03-026.asp



    "Jon Cosby" <com> wrote in message
    news:wMp2b.2562$news.pas.earthlink.net...
    I've run the batch file, and now the login is failing for aspnet. Tried
    reinstalling it, but that doesn't work.

    Jon Cosby



    "Ken Cox [Microsoft MVP]" <ca> wrote in message
    news:#zBAB#phx.gbl... 
    Update 
    ----- 
    This 
    from 
    XP 
    web 
    It 
    also 
    not 
    meantime, 
    The 
    ASPNET 
    and 
    which 
    run. 
    recreated 
    hardcoded 
    is 
    database 
    custom 
    file. 
    that 
    it: 
    now. 



    Ken Guest

  5. #5

    Default Re: Fix for: 'Server Application Unavailable' Error after Applying Security Update for IE

    Hi

    Is there anyway to reverse the script?

    Thanks
    le'Ke
    "Ken Cox [Microsoft MVP]" <ca> wrote in message
    news:%23%phx.gbl... 
    Worm? 
    > Update 
    >
    > --------------------------------------------------------------------------
    > ----- 
    > This 
    > from [/ref]
    Windows [/ref]
    5.1 [/ref]
    Unavailable". [/ref]
    XP. 
    > also 
    > not [/ref]
    itself. 
    > meantime, 
    > The 
    > ASPNET [/ref]
    account 
    > which [/ref]
    is 
    > recreated 
    > hardcoded [/ref]
    that 
    > database [/ref]
    recreated 
    > custom [/ref]
    batch 
    > that 
    > it: [/ref]
    account [/ref]
    settings 
    >
    >
    >[/ref]


    le'Ke Guest

  6. #6

    Default Re: Fix for: 'Server Application Unavailable' Error after Applying Security Update for IE

    It would be best to ask that here:

    http://www.asp.net/Forums/ShowForum.aspx?tabindex=1&ForumID=128

    Ken


    --
    Microsoft MVPs have a question for *you*: Are you patched against the Worm?
    http://www.microsoft.com/security/security_bulletins/ms03-026.asp



    "le'Ke" <com> wrote in message
    news:phx.gbl...
    Hi

    Is there anyway to reverse the script?

    Thanks
    le'Ke
    "Ken Cox [Microsoft MVP]" <ca> wrote in message
    news:%23%phx.gbl... 
    Worm? 
    > Update 
    >
    > --------------------------------------------------------------------------
    > ----- 
    > This 
    > from [/ref]
    Windows [/ref]
    5.1 [/ref]
    Unavailable". [/ref]
    XP. 
    > also 
    > not [/ref]
    itself. 
    > meantime, 
    > The 
    > ASPNET [/ref]
    account 
    > which [/ref]
    is 
    > recreated 
    > hardcoded [/ref]
    that 
    > database [/ref]
    recreated 
    > custom [/ref]
    batch 
    > that 
    > it: [/ref]
    account [/ref]
    settings 
    >
    >
    >[/ref]



    Ken Guest

Similar Threads

  1. Server Application Unavailable
    By Patricia Kline in forum ASP.NET Web Services
    Replies: 13
    Last Post: February 27th, 11:54 PM
  2. Server Error in web application-security exception
    By Paul in forum ASP.NET Security
    Replies: 0
    Last Post: May 23rd, 07:38 PM
  3. Replies: 4
    Last Post: August 28th, 10:41 PM
  4. Server Application Unavailable!!
    By Andy in forum ASP.NET General
    Replies: 5
    Last Post: August 23rd, 04:46 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139