Security concern of SendBinary method

• Previous message: Stanley G. Bubrouski: "Re: IIS 4.0 leaking files?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi all,

Does anybody using the SendBinary method ??

The method SendBinary has been given another optional argument, Attachment,
which controls whether the Content-Disposition header has the keyword
"attachment;" in it which forces a download for certain file types instead
of opening a document in-place in the IE browser.  

According to the recommendation in a Web-Hosting environment, it is better
to disable this function in registry as below,

The UploadManager.SendBinary method is disabled through the
DisableSendBinary value. 

Could somebody tell me about the security risk of SendBinary method and how
to fix it please ?  I am so desperate want to use this method over the
website.

Please advice.

Thanks in advance.

Regards,
Phoebe

• Next message: Greg Wirth: "Re[2]: Suspicious joe.exe"
• Previous message: Stanley G. Bubrouski: "Re: IIS 4.0 leaking files?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Aug 03 2001 - 10:43:59 PDT