Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Gianluca 56 posts 79 karma points
    Sep 23, 2010 @ 10:15
    Gianluca
    0

    ASP.NET Security Vulnerability leads to "an error occurred" exception.

    Hello everybody,

    I installed the patch by installing the available package. Umbraco did everything by itself and I was not requested to perform manually any operation. I can see there is the PoetPatcher folder in umbraco/plugins, and inside it I have CustomError.aspx, Guide.pdf and patch.ascx. 

    However since I installed this, sometimes, when I click on "save & publish" I get a message which reports "an error occurred while processing your request". If I repeat the operation I second time, it works. 

    Why is this happening? Can anyone help me to understand what it is wrong?

    Thanks in advance,

    Gianluca.

  • Ferry Meidianto 36 posts 63 karma points
    Sep 24, 2010 @ 03:50
    Ferry Meidianto
    0

    Try recycling the Application Pool and clean your browser cache.

  • Gianluca 56 posts 79 karma points
    Sep 24, 2010 @ 12:43
    Gianluca
    0

    Thank you Ferry, but no, unfortunately that is not going to resolve anything.

    I tried with different browsers that I had never used before to access the site. 

    Also, a iisreset (which also cleans up the Application Pool) is one of the first things I did.

    Any other idea?

    Cheers,

    Gianluca.

  • Ferry Meidianto 36 posts 63 karma points
    Sep 24, 2010 @ 18:26
    Ferry Meidianto
    0

    Hi Gianluca,

    Actually the purpose for that patch is to hide the real error message and redirect to a single page whatever the error code thrown. So I guess there must be an error with and without that patch. So my suggestion is to uninstall the patch and try or test your Umbraco - the same way you did that thrown the issue.

    Cheers,

    Ferry

  • Max Mumford 266 posts 293 karma points
    Sep 30, 2010 @ 10:11
    Max Mumford
    0

    I'm getting the same problem. Gianluca, have you tried the suggestions? any luck?

    Max.

  • Ferry Meidianto 36 posts 63 karma points
    Sep 30, 2010 @ 10:19
    Ferry Meidianto
    0

    Hi Max,

    You don't need to be bothered with it again now. Just remove the patch and update the server with the official fix.

    http://weblogs.asp.net/scottgu/archive/2010/09/28/asp-net-security-update-now-available.aspx

    Cheers,

    Ferry

  • Max Mumford 266 posts 293 karma points
    Sep 30, 2010 @ 11:40
    Max Mumford
    0

    Hi Ferry,

    Thanks, my Boss actually just told me that I didn't need to install the patch because our ISP updated ASP.NET anyway haha :)

    So if I just uninstall the package will the changes to my config files etc be undone? Or will I have to undo them manually?

    Thanks,

    Max.

  • Ferry Meidianto 36 posts 63 karma points
    Sep 30, 2010 @ 11:54
    Ferry Meidianto
    0

    You need to update the configs.

    The uninstall just removed the files not rolling back the config changes.

    config\404handlers.config

    and web.config

    those 2 only I think.

    Cheers,

  • Max Mumford 266 posts 293 karma points
    Sep 30, 2010 @ 16:02
    Max Mumford
    0

    For the sake of not hijacking this thread iv opened a new one with a follow up to your (Ferry) latest reply here:

    http://our.umbraco.org/forum/core/general/13160-Broken-404-page-after-uninstalling-aspnet-security-patch

    :)

    Max.

  • This forum is in read-only mode while we transition to the new forum.

    You can continue this topic on the new forum by tapping the "Continue discussion" link below.

Please Sign in or register to post replies