[Mod-security-developers] [JIRA] Resolved: (MODSEC-372) OWASP ModSecurity Core Rule Set used with ModsecurityIIS causes AppPool death

[Breno S. P. (JIRA) <no...@mo...>]

     [ https://www.modsecurity.org/tracker/browse/MODSEC-372?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Breno Silva Pinto resolved MODSEC-372.
--------------------------------------

    Fix Version/s: 2.7.2
       Resolution: Fixed

> OWASP ModSecurity Core Rule Set used with ModsecurityIIS causes AppPool death
> -----------------------------------------------------------------------------
>
>                 Key: MODSEC-372
>                 URL: https://www.modsecurity.org/tracker/browse/MODSEC-372
>             Project: ModSecurity
>          Issue Type: Bug
>      Security Level: Normal
>    Affects Versions: 2.7.1
>         Environment: Windows 2008 R2/IIS 7.5
>            Reporter: Magnus Eriksson
>            Assignee: Breno Silva Pinto
>              Labels: IIS, ModSecurityIIS
>             Fix For: 2.7.2
>
>
> When using ModsecurityIIS with OWASP ModSecurity Core Rule Set, modsecurityiis.dll crashes with the following errors in the event log:
> Log Name:      Application
> Source:        Application Error
> Date:          2/01/2013 6:05:01 PM
> Event ID:      1000
> Task Category: (100)
> Level:         Error
> Keywords:      Classic
> User:          N/A
> Computer:      xxxxxxx
> Description:
> Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7a5f8
> Faulting module name: modsecurityiis.dll, version: 0.0.0.0, time stamp: 0x50a2b51d
> Exception code: 0xc0000005
> Fault offset: 0x0002ad30
> Faulting process id: 0x720
> Faulting application start time: 0x01cde8b7783dfea0
> Faulting application path: C:\Windows\SysWOW64\inetsrv\w3wp.exe
> Faulting module path: C:\Windows\system32\inetsrv\modsecurityiis.dll
> Report Id: b9749a71-54aa-11e2-abfd-0026554839ff
> This brings down the app pool. This has been confirmed on 2 separate servers.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira