Hi, I am trying to implement these recommendations on a Sharepoint 2010 farm. I cannot get it to work. I have created a test site manually and got that to work however.
Has anyone else been able to get this working with Sharepoint 2010?
The only deviation from the published instructions is that I have tried to edit the system.webserver.httperrors section in case this has some bearing but it doesnt seem to have made any difference. I just keep getting 404 errors.
Is there any official confirmation that SharePoint 2010 is affected by this? We have a public-facing site. CustomErrors is on by default, but there is no default redirect, and no error page delay per the published workaround.
This doesn't work for me. I have tried two development servers and each insists on returning 404 errors. I seem to remember seeing something about this in a post but cant for the life of me find it again.
Anyone else?
I haven't seen a report from anyone using Sharepoint (2007 or 2010) that they have managed to implement any workaround successfully.
The is exactly the same problem I am having. I set up the custom error page and direct it to the layouts directory where the error page resides, but it does not work. The SharePoint site simply returns a 404 error. And I am doing this on WSS 3.0.
I have tried this approach to the one recommended and neither work as well:
Yes, that is exactly the original solution I tried. I also simply tried changing the error.aspx file that exists in the layout directory and that doesn't work either.
I have the same issue - after applying the fix, 404 errors are not served by the custom error page (they are handled by sps404.html instead). I'm not sure if this is 'by design', or if this is affected by the vulnerability, but it seems like SP has some
other process handling 404 errors...
mah624
0 Points
5 Posts
Sharepoint Server 2010 issues
Sep 20, 2010 12:53 PM|LINK
Hi, I am trying to implement these recommendations on a Sharepoint 2010 farm. I cannot get it to work. I have created a test site manually and got that to work however.
Has anyone else been able to get this working with Sharepoint 2010?
The only deviation from the published instructions is that I have tried to edit the system.webserver.httperrors section in case this has some bearing but it doesnt seem to have made any difference. I just keep getting 404 errors.
Thanks
Mark
boatboy
Member
68 Points
35 Posts
Re: Sharepoint Server 2010 issues
Sep 20, 2010 01:35 PM|LINK
Is there any official confirmation that SharePoint 2010 is affected by this? We have a public-facing site. CustomErrors is on by default, but there is no default redirect, and no error page delay per the published workaround.
budugu
All-Star
41188 Points
6034 Posts
Re: Sharepoint Server 2010 issues
Sep 20, 2010 02:18 PM|LINK
Yes, SharePoint's affected by this. From ScottGu's post..
<div style="PADDING-LEFT: 30px">Saturday, September 18, 2010 7:56 AM by ScottGu </div>@Rajesh,
>>>>>>>>> Does it affect Sharepoint sites too?
Yes - it also impacts Sharepoint.
Thanks,
Scott
"Don't be afraid to be wrong; otherwise you'll never be right."
mah624
0 Points
5 Posts
Re: Sharepoint Server 2010 issues
Sep 21, 2010 07:56 AM|LINK
In reply to myself, if anyone else comes here looking for the answer : http://blogs.msdn.com/b/sharepoint/archive/2010/09/21/security-advisory-2416728-vulnerability-in-asp-net-and-sharepoint.aspx
mah624
0 Points
5 Posts
Re: Sharepoint Server 2010 issues
Sep 21, 2010 11:31 AM|LINK
This doesn't work for me. I have tried two development servers and each insists on returning 404 errors. I seem to remember seeing something about this in a post but cant for the life of me find it again.
Anyone else?
I haven't seen a report from anyone using Sharepoint (2007 or 2010) that they have managed to implement any workaround successfully.
delta3
Member
4 Points
2 Posts
Re: Sharepoint Server 2010 issues
Sep 21, 2010 04:14 PM|LINK
The is exactly the same problem I am having. I set up the custom error page and direct it to the layouts directory where the error page resides, but it does not work. The SharePoint site simply returns a 404 error. And I am doing this on WSS 3.0.
I have tried this approach to the one recommended and neither work as well:
<customErrors mode="On" defaultRedirect="~/_layouts/error.htm" />
Any assistance would be greatly appreciated.
budugu
All-Star
41188 Points
6034 Posts
Re: Sharepoint Server 2010 issues
Sep 21, 2010 06:07 PM|LINK
Did you tried this one?
http://blogs.msdn.com/b/sharepoint/archive/2010/09/21/security-advisory-2416728-vulnerability-in-asp-net-and-sharepoint.aspx
FYi..FromJie LiMOSS 2007/WSS3 is not vulnerable to the attack. No workaround is needed right now, but you still need to apply the fix when it come out."Don't be afraid to be wrong; otherwise you'll never be right."
delta3
Member
4 Points
2 Posts
Re: Sharepoint Server 2010 issues
Sep 21, 2010 06:14 PM|LINK
budugu,
Yes, that is exactly the original solution I tried. I also simply tried changing the error.aspx file that exists in the layout directory and that doesn't work either.
boatboy
Member
68 Points
35 Posts
Re: Sharepoint Server 2010 issues
Sep 21, 2010 07:07 PM|LINK
I have the same issue - after applying the fix, 404 errors are not served by the custom error page (they are handled by sps404.html instead). I'm not sure if this is 'by design', or if this is affected by the vulnerability, but it seems like SP has some other process handling 404 errors...
Rovastar
Member
182 Points
59 Posts
Re: Sharepoint Server 2010 issues
Sep 21, 2010 07:22 PM|LINK
If IIS is returning the error page then this is not an issue. It is only if ASP.NET returns the page.