Re: FTP Access

That's ok Alan. Thanks for trying.

Paul

"Alan Edwards" <edwards@xxxxxxxxxxxxxxx> wrote in message
news:cgt1l25pou5j1g7adkdv91mpn6c81ttua4@xxxxxxxxxx
My apologies. It is a long time since I read that article and had
forgotten it didn't apply to FTP.

...Alan
--
Alan Edwards, MS MVP Windows - Internet Explorer
http://dts-l.org/index.htm



On Tue, 7 Nov 2006 11:13:42 -0800, in
microsoft.public.windows.inetexplorer.ie6.browser, "A+P"
<apa@xxxxxxxxxxxxxxxx> wrote:

Hi Alan,

BTW: In re-reading the link, the security update should not affect ftp
URLs
with username & password info which is the problem I'm having.
So this doesn't seem to apply to the error I'm experiencing in my case.

"Note
This change in the default behavior does not affect other protocols.
For example, you can still include user information in an FTP URL after
you
install the 832894 security update."

Paul

"A+P" <apa@xxxxxxxxxxxxxxxx> wrote in message
news:ugUZv6pAHHA.1224@xxxxxxxxxxxxxxxxxxxxxxx
Hi Alan,

Thanks for the link. I tried the registry edits to disable the modified
IE behavior.
But IE still will not allow me to access the ftp site with the following
URL address format: ftp://username:password@hostname
Now, would I require a reboot for the registry to take into affect?
How to disable the new default behavior for handling user information in
HTTP or HTTPS URLs
To disable the new default behavior in Windows Explorer and Internet
Explorer, create iexplore.exe and explorer.exe DWORD values in one of
the
following registry keys and set their value data to 0. . For all users
of
the program, set the value in the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
. For the current user of the program only, set the value in the
following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE


Paul

"Alan Edwards" <edwards@xxxxxxxxxxxxxxx> wrote in message
news:h4rvk2198ekj1ff152q66vf2ubn94vb2ml@xxxxxxxxxx
Read this and report back if you need help with the Registry
alterations.

"username:password@" information.

A security update is available that modifies the default behavior of
Internet Explorer for handling user information in HTTP and in HTTPS
URLs
http://support.microsoft.com/?id=kb;en-us;834489


http://www.microsoft.com/technet/security/Bulletin/MS04-004.asp
Microsoft Security Bulletin MS04-004
Cumulative Security Update for Internet Explorer (832894)

...Alan
--
Alan Edwards, MS MVP Windows - Internet Explorer
http://dts-l.org/index.htm



On Mon, 6 Nov 2006 17:38:52 -0800, in
microsoft.public.windows.inetexplorer.ie6.browser, "A+P"
<apa@xxxxxxxxxxxxxxxx> wrote:

Hi,

Our office purchased HP xw4200 & xw6200 & xw6400 machines running XP
SP2.
We have no problems accessing FTP sites from the URL on the 4200 &
6400.
But on the 6200s, IE6 and IE7 will not connect to the ftp sites using
the
following address protocol:
ftp://username:password@hostname
We've tried running & installing Window Updates.
We've tried matching all the IE settings on the xw6200 machines with
the
others like:
1. turning off "Show friendly HTTP error messages",
2."Enable folder view for FTP sites"
3. "Use Passive FTP"

But it still doesn't work. Any thoughts?

Paul






.

Relevant Pages

  • [Full-disclosure] Rapid7 Advisory R7-0032: Microsoft Internet Explorer FTP Command Injection
    ... Microsoft Internet Explorer FTP Command Injection Vulnerability ... malicious files to an FTP server under the attacker's control, ...
    (Full-Disclosure)
  • Re: FTP Access
    ... MS MVP Windows - Internet Explorer ... the security update should not affect ftp URLs ... Internet Explorer for handling user information in HTTP and in HTTPS ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: FTP Access
    ... the security update should not affect ftp URLs ... Internet Explorer for handling user information in HTTP and in HTTPS ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: sendmail compromised - Somebody help me!
    ... > through VPN. ... I do use an FTP server. ... Internet Explorer window and let go of the mouse button. ...
    (comp.os.linux.networking)
  • Re: Cant log into any ftp server
    ... Internet Explorer, and found that Passive FTP was checked already ... In response to another person's response, ... It might also be a firewall program. ...
    (microsoft.public.windowsxp.help_and_support)
Loading