MS10-070 Released Out-of-Band Today
The title says it all. Get patching. Hit up the security bulletin for downloads.
The title says it all. Get patching. Hit up the security bulletin for downloads.
The Microsoft SharePoint team has released specific guidance for a workaround for the recently announced ASP.NET vulnerability (Security Advisory 2416728). With a slight modification, this guidance will also apply to SharePoint 2007.
For SharePoint 2010, the relevant web.config entry will look like:
<customerrors defaultredirect="/_layouts/error2.aspx" mode="On" redirectmode="ResponseRewrite"></customerrors>
While for SharePoint 2007, the web.config entry will read:
<customerrors defaultredirect="/_layouts/error2.aspx" mode="On"></customerrors>
Well, the title says it all doesn't it? Windows Vista/7 (but mostly 7 as no one ever really used Vista) have a problem when accessing WebDav shares on sites with a fully qualified domain name (FQDN). This becomes very apparent with MS Office and attempting to access documents stored in SharePoint document libraries.
Most people would skip over the remainder of the article after reading that this issue was resolved after the release of Vista SP1. Reading on, one would learn that even with the hotfix, a registry entry must be created which will allow client side programs such as Office pass their credentials through to the server.
The following registry entry must be created:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters
The Acuff Group recently posted a whitepaper titled A Manager’s Guide to SharePoint [PDF] which makes for an interesting afternoon read.