Re: Windows XP IIS unable to fork

Is allowing the NETWORK SERVICE account in IIS6 execute permissions on cmd.exe a security hole? "Robert P Howard" <RHoward@anbe.cdscc.nasa.gov> wrote in message news:B1BC8A54C06BD211AC7900805F952ED701B63A2D@anbe.cdscc.nasa.gov... > You should NOT be allowing the IIS accounts to run cmd.exe. This is the > LARGEST whole that can be opened for a Windows/IIS system. > > Regards > Robert Howard > > -----Original Message----- > From: Per Lundberg [mailto:per@nobolt.com] > Sent: Wednesday, 23 April 2003 4:34 PM > To: Bryan Thoreson > Cc: php-windows@lists.php.net > Subject: Re: [PHP-WIN] Windows XP IIS unable to fork > > > On Tue, 2003-04-22 at 20:32, Bryan Thoreson wrote: > > Looks like the IIS account cannot run anything in system32 by default. > Allow > > it to execute cmd.exe and I'm finally good to go. Stupid security. > > It is not stupid. Remember that Microsoft has had *lots* of security > problems with IIS, especially with buffer overflows allowing remote > users to run any program on your server. > > Be aware that changing this setting might be opening a can of worms. > -- > Best regards, > > Per Lundberg / Capio ApS > Phone: +46-18-4186040 > Fax: +46-18-4186049 > Web: http://www.nobolt.com > > ############################################################################ ######### > This e-mail message has been scanned for Viruses and Content and cleared by MailMarshal > ############################################################################ #########