FIX: HTTP Error 403 When Submitting PATH_INFO to Mapped Application (252352)


The information in this article applies to:

  • Microsoft Windows NT Server 4.0 SP6a
  • Microsoft Windows NT Workstation 4.0 SP6a
This article was previously published under Q252352

SYMPTOMS

When submitting extra path information to an Internet Information Server (IIS) application that has been mapped to a file extension, an error "403.2 Forbidden: Read Access Forbidden" will be returned to the browser.

RESOLUTION

This problem can be resolved by loading the hotfix available at the following location:

IIS 4.0 SSL ISAPI Filter Update

STATUS

Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

The following URL will execute the CGITest.exe application passing /Extradir/Extra.txt as PATH_INFO.

http://<server>/<scripts>/CGITest.exe/extradir/extra.txt

You can map a file extension to the CGITest.exe using the Internet Service Manager. If the mscgi extension is mapped to CGITest.exe, the above URL can be executed as follows:

http://<server>/<scripts>/CGITest.mscgi/extradir/extra.txt

In this case, computers running Windows NT 4 Service Pack 6a will return a 403 error.

REFERENCES

For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

184320 Using PATH_INFO and PATH_TRANSLATED from CGI Applications

Modification Type:MajorLast Reviewed:10/24/2003
Keywords:kbBug kbfix kbiis400fix KB252352
©2003 Microsoft Corporation. All rights reserved.