[ https://www.modsecurity.org/tracker/browse/MODSEC-372?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Breno Silva Pinto resolved MODSEC-372.
--------------------------------------
Fix Version/s: 2.7.2
Resolution: Fixed
> OWASP ModSecurity Core Rule Set used with ModsecurityIIS causes AppPool death
> -----------------------------------------------------------------------------
>
> Key: MODSEC-372
> URL: https://www.modsecurity.org/tracker/browse/MODSEC-372
> Project: ModSecurity
> Issue Type: Bug
> Security Level: Normal
> Affects Versions: 2.7.1
> Environment: Windows 2008 R2/IIS 7.5
> Reporter: Magnus Eriksson
> Assignee: Breno Silva Pinto
> Labels: IIS, ModSecurityIIS
> Fix For: 2.7.2
>
>
> When using ModsecurityIIS with OWASP ModSecurity Core Rule Set, modsecurityiis.dll crashes with the following errors in the event log:
> Log Name: Application
> Source: Application Error
> Date: 2/01/2013 6:05:01 PM
> Event ID: 1000
> Task Category: (100)
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: xxxxxxx
> Description:
> Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7a5f8
> Faulting module name: modsecurityiis.dll, version: 0.0.0.0, time stamp: 0x50a2b51d
> Exception code: 0xc0000005
> Fault offset: 0x0002ad30
> Faulting process id: 0x720
> Faulting application start time: 0x01cde8b7783dfea0
> Faulting application path: C:\Windows\SysWOW64\inetsrv\w3wp.exe
> Faulting module path: C:\Windows\system32\inetsrv\modsecurityiis.dll
> Report Id: b9749a71-54aa-11e2-abfd-0026554839ff
> This brings down the app pool. This has been confirmed on 2 separate servers.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
|
