HP OpenView Select Access 5.2 Engineering Patch G

Issue:

The attached Engineering Patch addresses an issue in the IIS enforcer that when Unicode was used as part of a URL and this URL was then UTF-8 encoded that these URL’s would not be decoded correctly and that users could gain access to resources that normally they should not be expected to have access to.

Dependencies:

This Engineering Patch is dependant on HP OpenView Select Access 5.2.

To Install:

· Stop the IIS

· Back-up or re-name the following files on, Select Access\bin\IISPlugin32.dll and enforcer32.dll,

· Expand the files from SA52_Eng_Patch_G.zip into Select Access\bin

· Run the following commands from a command prompt, the metabaseeditor.exe is found in the Select Access\shared directory

• metabaseeditor.exe -u "HP OpenView Select Access"
• metabaseeditor.exe "HP OpenView Select Access" "<full path to>\IISPLUGIN32.dll"
• metabaseeditor.exe -s "<full path to>\IISPLUGIN32.dll"

Example, from a command prompt:

C:\Program Files\HP OpenView\Select Access\shared>metabaseeditor.exe -u ”HP OpenView Select Access”

C:\Program Files\HP OpenView\Select Access\shared>metabaseeditor.exe ”HP OpenView Select Access” ”C:\Program Files\HP OpenView\Select Access\bin\IISPlugin32.dll”

C:\Program Files\HP OpenView\Select Access\shared>metabaseeditor.exe -s ”C:\Program Files\HP OpenView\Select Access\bin\IISPlugin32.dll”

· Start IIS

Engineering Patch Notice:

This Engineering Patch has been released to address the issue noted above and only sanity verified as to whether it address' this particular issue. All users of this engineering patch should test in there own environment to verify whether this patch resolves the issue above in there environment/configuration.

This Engineering Patch may or may not be incorporated into a future release in its present or enhanced form.