Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security ISSForum
[Top] [All Lists]

RE: [ISSForum] IIS webserver outage (System Scanner XPU 36 update)

Subject: RE: [ISSForum] IIS webserver outage (System Scanner XPU 36 update)
Date: Thu, 9 Jun 2005 15:12:18 -0400
Wendy/Jean:

I too have had this problem. When I apply updates (SP or XPU) our many
(critical) Web servers IIS service goes down. I spoke to an ISS tech
about it, told him what usually happens and how critical it is that I do
not disrupt IIS during business hours. He assured me that my problem was
rare and some SP or other had fixed it. So I ran update while on the
phone with him and, sure enough, 5 min. later I am getting calls from
people about IIS being down. It happens about 75% of the time. All we
have is 2003 so I don't know if it will happen with 2000. 

By the way, even if it restarts the service the web server still stays
down. I have to go into IIS and restart the web server itself.


David

-----Original Message-----
From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] On
Behalf Of Wendy Davis
Sent: Tuesday, June 07, 2005 3:58 PM
To: neil.laporte@bell.ca; issforum@iss.net
Subject: RE: [ISSForum] IIS webserver outage (System Scanner XPU 36
update)


When I apply updates (Not just XPU 36) it stops the web sites running on
the IIS box and we have to manually restart it.  I have had this happen
numerous times.  I have had to work this process into my change control
when I apply XPU updates to our web servers.

Wendy Davis

-----Original Message-----
From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] On
Behalf Of neil.laporte@bell.ca
Sent: Monday, June 06, 2005 11:30 AM
To: issforum@iss.net
Subject: [ISSForum] IIS webserver outage (System Scanner XPU 36 update)

Has anyone ever seen the following situation?

 

Earlier this morning I pushed out System Scanner XPU 36 to some of our
System Scanner agents.

 

For some reason, when applying XPU 36 to servers running IIS webservers,
it caused the IIS webserver to re-start.

 

This caused a considerable outage.

 

Could you please let me know why XPU 36 could have impacted the IIS
webservers in such a way?

 

Any feedback would be appreciated.

 

Thanks in advance.

 

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

<Prev in Thread] Current Thread [Next in Thread>