Scott Hanselman

ASP.NET HotFix 887219/MS05-004 may break and confuse IIS and ASP.NET (404s)

February 11, '05 Comments [4] Posted in ASP.NET
Sponsored By

Here's an interesting one from Jeff Berkowitz and Phil Hochstetler:

Phil has discovered that MS hotfix 887219 / MS05-004 (http://www.microsoft.com/technet/security/Bulletin/MS05-004.mspx), released last Wednesday, completely breaks our site.  At least on one test machine--happily we caught it before it reached Production.  With the hotfix installed, all our virtual roots (three of them, one containing a web application and two containing collections of web service pages) return 404s exclusively.  Backing out just this one hotfix solves the problem.

The fix was found by Phil on Google Groups: Go to IIS Admin, open Properties on Web Site, Home directory tab, Local Path text box: make sure there is no trailing slash.

 

About Scott

Scott Hanselman is a former professor, former Chief Architect in finance, now speaker, consultant, father, diabetic, and Microsoft employee. He is a failed stand-up comic, a cornrower, and a book author.

facebook twitter subscribe
About   Newsletter
Sponsored By
Hosting By
Dedicated Windows Server Hosting by SherWeb
Friday, 11 February 2005 07:55:51 UTC
This bit me (or rather, my hosting provider) right in the ass. My site was down for most of Tuesday night/Wednesday morning because of this.
Friday, 11 February 2005 10:39:27 UTC
Scott,

You saved my ass on this one, We've had people looking at Content Switches, Secure Content Accelerators etc - no joy, but 1 minute after reading this and I'm back up again.

Many thanks

PS I've now taken automatic updates OFF off this box.
Marshall Brooke
Friday, 11 February 2005 18:29:30 UTC
Doesn't seem likely that non-admins are applying patches very often, but if they are, Microsoft has described a performance issue that happens with this same patch.
http://support.microsoft.com/kb/891829
Wednesday, 23 February 2005 16:09:52 UTC
We installed the hotfix in our dev box and it broke our form submission (which was really weird but whatever). We uninstalled it and suddenly got serialization errors whenever the HI interacted with the host since we've got a single-box environment right now. Our dev box was completely hosed and we're only now getting it rebuilt.

Take images of your dev boxes people.
Comments are closed.

Disclaimer: The opinions expressed herein are my own personal opinions and do not represent my employer's view in any way.