🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: borland.public.cppbuilder.webservices.soap
Article #124

COM server in SOAP server-security issue?

#124
From: manosg80
Date: Wed, 16 Mar 2005 10:01
26 lines
2279 bytes
Hi there,

I had a COM DLL server (automation interface) which essentially uses a
TSocketServer component to implement TCP functionality. Recently I was
asked to convert it to a SOAP server and did so using SOAP Toolkit 3 -
yes, it's outdated but it's fast. The SOAP server now, among others,
exposes the methods StartListening which invokes a listening socket to
port 210 and ServerStatus which returns 1 if socket is up and listening
and 0 if it's not.

Here starts the odd thing: when I call the method StartListening from a
SOAP client, the method opens the socket, queries the socket compoenent
if it is active and returns a success string. However, although the
string indicates success, no socket appears on the firewall to have
been raised. On addition, the ServerStatus method always returns 0.

The COM server has been tested extensively with COM clients and works
fine, I can see on the firewall the socket raised, returns correct
status messages, etc.

This 'selective' behavior seems like a security issue though I have set
IUSR_computername user as administrator and given full access to this
user to the directory where the soap server resides but now I'm out of
clues. Any suggestions as to where to look for a solution?

Thank you
Technical Details
Message-ID: <1110964498.052398.79750@o13g2000cwo.googlegroups.com>
Path: arc1-ca.pugleaf.net!g2news1.google.com!postnews.google.com!o13g2000cwo.googlegroups.com!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Thread: 11096a,99b028428e0227a8,start
X-Google-Attributes: gid11096a,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!postnews.google.com!o13g2000cwo.googlegroups.com!not-for-mail
From: "manosg80@no_spam.com" <manosg80@gmail.com>
Newsgroups: borland.public.cppbuilder.webservices.soap
Subject: COM server in SOAP server-security issue?
Date: 16 Mar 2005 02:01:19 -0800
Organization: http://groups.google.com
Lines: 27
Message-ID: <1110964498.052398.79750@o13g2000cwo.googlegroups.com>
NNTP-Posting-Host: 150.140.187.109
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
X-Trace: posting.google.com 1110967283 12386 127.0.0.1 (16 Mar 2005 10:01:23 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Wed, 16 Mar 2005 10:01:23 +0000 (UTC)
User-Agent: G2/0.2
Complaints-To: groups-abuse@google.com
Injection-Info: o13g2000cwo.googlegroups.com; posting-host=150.140.187.109;
   posting-account=NdY1sA0AAAB2eI_l_UIiBB7_hnOXxvwQ