KB160570 - Gopher Query Will Access Violate in Inetinfo.exe

Article ID: 160570

Article Last Modified on 6/22/2005

Microsoft Internet Information Server 1.0
Microsoft Internet Information Server 2.0

This article was previously published under Q160570

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SYMPTOMS

When you issue the following gopher query to the server, the server will access violate in Inetinfo.exe:

gopher://<servername>/11 \..

CAUSE

This is caused by an error in the Internet Information Server gopher code that fails when there is no leading "/".

WORKAROUND

Place a leading "/" in your URL:

gopher://<servername>/11/ \..

STATUS

Microsoft has confirmed this to be a problem with Microsoft Internet Information Server versions 1.0 and 2.0. This problem was corrected in U.S. Service Pack 2.0 for Microsoft Windows NT. For information on obtaining the Service Pack, query on the following word in the Microsoft Knowledge Base (without the spaces):

S E R V P A C K

Additional query words: sp2

Keywords: kberrmsg kbbug KB160570