“Fix” for MS03-032 w/ ASP.NET and IIS

This fix (or this one for Windows 2003 Server) for the “ohmygawd” security issue detailed in TechNet article MS03-032 (MSKB 822925) apparently breaks applications that run on an IIS installation that also has ASP.NET 1.0 installed. Fortunately there’s a workaround, detailed here which deletes and recreates the ASP.NET account. According to the ASP.NET web page, the problem only affects Windows XP Professional installations.

Couple of NBs:

* the TechNet article listed above contains a lot of extra information about the original flaw and the fix.
* this is a cumulative IE patch so it fixes several other problems and should bring your version of Internet Explorer up-to-date.

Leave a Comment