Re: IIS 5.0 PROPFIND DOS

["Johansen, Eric" <ejohansen () MARKETWATCH COM>]

There is no need for this batch file - a simple IISRESET will suffice.  It
stops the web service "gently" then restarts it, the only time the switches
are needed are if you want to stop the service...do some stuff...then start
(versus just stopping and starting in one fell swoop).  IISRESET.exe is
located in C:\WINNT\system32 by default.

-----Original Message-----
From: Tiago Halm [mailto:thalm () LONDONOFFICE COM]
Sent: Thursday, March 08, 2001 5:28 PM
To: BUGTRAQ () SECURITYFOCUS COM
Subject: Re: IIS 5.0 PROPFIND DOS


While Microsoft is solving this issue and there is no
patch available, I recommend the following workaround
successfully tried over IIS 5.0 (Windows 2000) and IIS 5.1 (Whistler).

Create a batch file (ex: workaround.bat) with the following 2 lines:

IISRESET /STOP
IISRESET /START

save the file in a safe place not acessible by HTTP.

Then
1 - Click "Properties" in the "World Wide Web Publishing Service" service
2 - Choose the "Recovery" tab
3 - Select the "Run a File" option in the "First Failure" combo box.
4 - In the "Run file" text box, type the full pathname of your batch file
created above.
5 - Repeat this procedure for the "Second failure" and "Subsequent failures"
combo boxes.

In case of problems using this approach, any input is appreciated!

Tiago Halm