ASP error 'ASP 0115', but for only one user - iis

Classic ASP application on a locally hosted server (IIS7). Everyone else in the organization can access this application just fine. This specific user encounters the following error:
Active Server Pages error 'ASP 0115'
Unexpected error
/OurApp/OurApp.asp
A trappable error (C0000005) occurred in an external object. The script cannot continue running.
I've found this article on MSDN. However, since all users bar one are able to access this application, the problem doesn't seem to be a general permissions problem.
What might be causing this specific user to run into errors?

0xC0000005 is the access violation error, its not about permission, is about attempting to read or write protected memory. There must be a user based logic in the OurApp.asp script or one or more components in it which attempts to read or write protected memory just in case of this specific user.

Related

How to fix when callback url has word 'GRANT' which is security violation in Coldfusion

In coldfusion 11, I got an unexpected issue when callback url is below from Azure AD SSO
http://xxx123.net?displayName=**Grant**%2C%20Good&givenName=Good&id=xxxxxxxxxx&jobTitle=Stackoverflow&mail=Good.**Grant**%40xxx.com&&surname=**Grant**
then show error.
GRANT: Security violation, broken link, SQL reserved word or APP problem - We have detected a problem in APP, which can either be the use of illegal content in the URL, a APP application problem, missing data, a broken link or the use of an SQL reserved word (e.g. SELECT, DELETE, OUTER). Application execution has been halted. If you can reproduce this problem, please inform the system administrators. We will look into the problem as soon as possible. Thank you.
The root cause : 'Grant' is security violation of URL.
I tried use rant instead of grant as the link below, and that's working.
http://xxx123.net?displayName=**rant**%2C%20Good&givenName=Good&id=xxxxxxxxxx&jobTitle=Stackoverflow&mail=Good.**rant**%40xxx.com&&surname=**rant**
Although, I tried using Grant1 or GrantX or 1Grant. Also does not work fine.
So, how to resolve this problem to avoid a problem above ?

error 500 http web server: command not handled exception

I think this topic a lot of ppl post it already. I also look for lot of thread in stack overflow and some ibm page. They do give some comment of how to solve this problem. But i still facing the same problem, it still give this error.
Case start :
Actually one of my customer, they have facing this error during running on webpages and also notes ~
error 500 http web server: command not handled exception
Action taken but not solve:
The user id signing/creating the XPages allowed to run XPages in the
server document?
Do project clean, build automatically on designer
Do testing on creating new xpages page with simple lable " hello world" , this one can run successfully only.
Try to reload the http server by
tell http quit
load http
After do this the problem still same give the same error. May i know got any other way to solve it?
"Unresolved compilation errors: java.lang.String" points to a failed install as here. A class in java.lang or java.util should always be resolved. Ensure all services and any processes for Notes / Domino are stopped before the relevant install, jar files can get locked once used. Xpages can't load, Error 500; java.util cannot be resolved
Switch on "Display XPage runtime error page" in application's XSP Properties then you'll see a detailed error message which probably will lead you to the issue:
I frequently get this error when there is a mismatch/problem with access rights or the user login has expired and the app/database doesn't redirect to the login page. I suggest you double check the security basics first. (Might also explain why the app works locally, but not on the server).

Coldfusion 2016 - 403 forbidden error for schedule tasks

I have two schedule task which is running in coldfusion administrator. They are giving 403 forbidden error when run through coldfusion administrator. Here is the log which i get.
"Information","DefaultQuartzScheduler_Worker-8","02/22/17","10:11:00","","Task default.example - Get detail Dev triggered."
"Information","DefaultQuartzScheduler_Worker-4","02/22/17","10:11:00","","Task default.example - Get detail Live triggered."
"Error","DefaultQuartzScheduler_Worker-8","02/22/17","10:11:00","","403 Forbidden "
"Error","DefaultQuartzScheduler_Worker-4","02/22/17","10:11:00","","403 Forbidden "
The task url is running good through browser. It seems that it is something related to permission problem. I have checked the permission of coldfusion Application 'log on as' user on the CFIDE directory and task url directory. It has full control.
Can anyone guide me to solve this problem.
This post is a little old but I've happened across the same problem and I thought I'd share our solution here.
We're running ColdFusion 2016 on a dedicated Windows 2012R2 box. We have several client sites on our box and we're completely locked down using Peter Freitag's lockdown guide.
This is was a new server migration from a CF10 server on another box. Once I set up the scheduled task exactly as we had done before, I received several "403 Forbidden" responses.
The only real way to troubleshoot this is to activate the "Save output to a file" option on the scheduled task itself and save the file to a directory where your CFUser has write access to. "CFUser" of course is the Windows user your CF service uses.
My first test of the URL was through Chrome on the server and it worked just fine so my URL was valid and of public access.
When I fired the scheduled task, it said "The scheduled task ran successfully" however the results of the output file showed it didn't. In our case, an outside service called "Cloudflare" was blocking our request. The error from Cloudflare asked us to enable cookies which we can't do in a scheduled task request. In our case, our hosting provider must provide an exception for requests made from our server's dedicated IP.
Most of the time, these error are generated because of file permission issues on Windows. If you're sure that your CFUser has read & execute permission to the requested template, then you need to output the scheduled task result to fully understand the error.

IIS 6 is throwing a "500 - Internal Server Error" for some users but not others

I had written a mini App in asp classic this week. It worked perfectly on the test server connecting to the test data base. Then yesterday evening I moved it from the test server to the live server updating the connection strings to the live db.
I published it as an application to the default website in the default app pool. Then I tested it and it worked perfectly.
This morning however both myself and another user receive a 500 -internal Server error when we try and save changes to the database(there appears to be no issue reading from the db) yet my two other collogues have no issue at all.
Even more odd is that the same thing is happening on the test server where the code hasn't been changed in weeks. But this morning I cannot commit to the db from there either.
I have attempt to enable more detailed error tracking and logging but the property options for the server are seem unavailable when i tried to set up custom Active Server Pages (ASP) error pages off online tutorials.
The server is used by a lot of people so I was wondering is their a permission issue depending on the user that restricts writting to the database. Or something else that may have changed to allow some users to write data and others to receive the error.
Im very knew to IIS so it may be something glaringly obvious that I haven't considered.
Thanks
This article should help you:
In earlier versions of IIS, error messages from classic ASP scripts
were sent to a Web browser, by default. Because these error messages
might reveal sensitive information to malicious users, IIS 7 and above
disables this feature by default. When your classic ASP scripts
encounter an error in IIS, you receive the following error message by
default:
An error occurred on the server when processing the URL. Please contact the system administrator.
If you are the system administrator please click here to find out more about this error.

IIS 8 error on windows server 2012 insufficient permission

There was an error when trying to connect. Do you want to retype your credentials and try again?
Details:
Filename: \?\C:Windows\system32\inetsrv\config\redirection.config
Error: Cannot read configuration file due to insufficient permissions
Screenshot:
Suddenly I have this error when trying to access my application on IIS 8! Does anyone know how to fix it?
I had a similar issue and this article helped me resolve the issue: https://blogs.msdn.microsoft.com/prashant_upadhyay/2011/09/20/unable-to-expand-server-node-in-the-iis-7-ui-with-shared-configuration/
The issue in my case was the account associated with configurationRedirection was locked, once enabled the issue was resolved.
I guess a similar issue would arise if the account did not have access to the Shared configuration folder, or if the account's password/credentials had changed.
I had the exact same error message for one of my users following a permissions change to his user account. Turned out he had an old "disconnected" RDP session on the server. Once that was signed off (via task manager) the error went away.

Resources