RE: [PHP-WIN] Windows XP IIS unable to fork
| From: | Howard, Robert P | Date: | Wed, 23 Apr 2003 06:36:29 +0000 |
| Subject: | RE: [PHP-WIN] Windows XP IIS unable to fork | ||
| Groups: | php.windows | ||
| Request: | Send a blank email to php-windows+get-19565@lists.php.net to get a copy of this message | ||
You should NOT be allowing the IIS accounts to run cmd.exe. This is the
LARGEST whole that can be opened for a Windows/IIS system.
Regards
Robert Howard
-----Original Message-----
From: Per Lundberg [mailto:per@nobolt.com]
Sent: Wednesday, 23 April 2003 4:34 PM
To: Bryan Thoreson
Cc: php-windows@lists.php.net
Subject: Re: [PHP-WIN] Windows XP IIS unable to fork
On Tue, 2003-04-22 at 20:32, Bryan Thoreson wrote:
> Looks like the IIS account cannot run anything in system32 by default.
Allow
> it to execute cmd.exe and I'm finally good to go. Stupid security.
It is not stupid. Remember that Microsoft has had *lots* of security
problems with IIS, especially with buffer overflows allowing remote
users to run any program on your server.
Be aware that changing this setting might be opening a can of worms.
--
Best regards,
Per Lundberg / Capio ApS
Phone: +46-18-4186040
Fax: +46-18-4186049
Web: http://www.nobolt.com
#####################################################################################
This e-mail message has been scanned for Viruses and Content and cleared by MailMarshal
#####################################################################################