Re: Security Issue with .Net framework 1.1

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: John Saunders (john.saunders)
Date: 05/07/04 

Date: Fri, 7 May 2004 18:21:57 -0400

"Vineet" <vin_bhatia@hotmail.com> wrote in message
news:A9E8503E-068D-4B9D-B1D9-6F57F1064965@microsoft.com...
> Hi,
>
> I have a web application built around .NET framework 1.0. We upgarded
the framework from 1.0 to 1.1 recently. With it, we are facing some strange
behaviour. If I try and access the application the first time from any
client, it fails at a point where it tries to load a file giving a security
error. If i start the application from the server the first time, it does
not fail from anywhere. Another point, if I start the Application first time
from any client machine on the network, with the client user having
administrator privileges on the server machine, the application succesfully
loads up.
>
> It seems to be some security setting change that has happened in the .NET
framework 1.1. This behaviour is not noticed with framework 1.0
>
> Any inputs on this will be really appreciated.

Look at the stack trace and determine exactly what action is causing the
SecurityException. If possible, display the entire exception with
ex.ToString().

This sounds like there is some resource which requires privileges to
instantiate, but which can be accessed by anyone once it's been
instantiated. 

-- 
John Saunders
John.Saunders at SurfControl.com

Relevant Pages

  • Re: a pre-beginners question: what is the pros and cons of .net, compared to ++
    ... > party controls is expensive... ... This is where you end up fighting with the framework; ... LSA in the context of "Local Security Policy"? ... Let's say you want to add a new Anti-Virus service account to all ...
    (microsoft.public.dotnet.general)
  • Re: Is there an Open Source Vulnerability Analysis Framework?
    ... Is there an Open Source Vulnerability Analysis Framework? ... end-to-end framework for security assessment. ... Download FREE whitepaper on how a managed service can ...
    (Pen-Test)
  • Re: ANN: SymbolicWeb v0.1 (quite alpha) w/ source code this time
    ... server model on its head and constructing as much of the widgets ... client-side, and your framework at ... the effects at the client end in real time as I go. ... instead of doing the conventional Web 1.0 method of redrawing ...
    (comp.lang.lisp)
  • Re: CoBIT a Security Audit Framework?
    ... You can try the "IS Auditing Procedure: P08 Security Assessment - Penetration Testing and Vulnerability Analysis" document at the ISACA web page, it describes a process to execute a pentest aligned to CobiT, also you can add some features from OSSTMM or NIST to obtain a more global pentest process. ... CoBIT a Security Audit Framework? ...
    (Pen-Test)
  • Re: soapsuds
    ... We can then compile the client using this code which allows us to ... of this stops you from implementing your own remoting framework. ... server or be sure that the v1 clients will work with the v2 server. ... Are you going to have all new v2 interfaces in the ...
    (microsoft.public.dotnet.framework.remoting)