KB151963 - CGI Scripts Must Use Full Directory Path

Article ID: 151963

Article Last Modified on 6/23/2005

Microsoft Internet Information Server 1.0

This article was previously published under Q151963

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SYMPTOMS

CGI scripts that manipulate files in directories other than where the CGI script is executed will not run correctly if the CGI script references virtual directory aliases rather than the full path to the file.

CAUSE

The Internet Information Server (IIS) CGI interface does not recognize virtual directory names.

RESOLUTION

For example, when you open a file, use the following:

   c:\inetsrv\scripts\data\mycgidata.txt

instead of the following:

   /scripts/data/mycgi.txt.

STATUS

Microsoft has confirmed this to be a problem in Microsoft Internet Information Server version 1.0. We are researching this problem and will post new information here as it becomes available.

Additional query words: prodiis

Keywords: kbnetwork KB151963