IIS w3svc error

By -

Problem Statement:

I am trying to start my website in IIS, whenever i try to start my website i get the following error
"Cannot start service w3svc on computer"

I tried to start "World wide web publishing service", but i wasnt able to start it as it said "Error 1068: The dependency service or group failed to start".

Meanwhile when i checked my log i found this error,

"The World Wide Web Publishing Service service depends on the HTTP service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it."
Please help me, i am badly caught with this error, i hhave spent a week researching this error but havnt found a solution yet.

Solution:

Well finally after a week struggle, i came to a solution. I am listing down the steps which i followed to solve my error

1- Confirm that "Windows Management Instrumentation" is started and its start up type is set to automatic.

2- Also make sure the following dependency services are started for World Wide Web Publishing Service. 

 Windows Process Activation Service, Remote Procedure Call (RPC), DCOM Server Process Launcher, RPC Endpoint Mapper.

3- Open regedit, navigate to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP]:
         a) Double click on Start and change value data from 4(disabled) to 3(automatically).
         b) Delete "NoRun" key if this key exists

4- UN-install "Internet information Service" and "Windows process activation service(if it is already installed)" from "Turn windows feature on or off" and Restart your PC.

5- Type the below command in CMD and press enter
    net start http
    Now it will notify you that service is already running.

6- Re-install Internet information Service from "Turn windows feature on or off".

7- Start IIS and my websites are started now, no more "w3svc service is not running error."

Discussions:

Actually not a lot of help is available about this error on forums, but i had small discussions on 2 forums about this error, i am listing down the links to the questions

1) Stack Overflow
2) IIS Forums

Special Thanks:

I think it will be very UN-ethical if i do not mention this guy's contribution in resolving my error. I am really thankful to him for his wonderful effort.

Comments

Post a Comment

Popular posts from this blog

GRANDING UTime Master - IDOR (CVE-2023-45393)

By -
Image
  Hi All, I was able to identify IDOR Vulnerability in one online attendance system i.e. GRANDING UTime Master (v  UTime Master_9.0.7-Build:Apr 4,2023 ).  CVE ID: CVE-2023-45393 UTime Master is a powerful web-based time and attendance management software that provides a stable connection to GRANDING’s standalone push communication devices by Ethernet/Wi-Fi/GPRS/3G and working as a private cloud to offer employee self-service by mobile application and web browser. Using IDOR any user of the application can fetch Logs which are only meant to be accessible to administrators only. These logs also contains sensitive information like user password which is used to do the attendance by employees. Login to UTime Master using any account. Capture the request in burpsuite with the valid cookies. modify the URL to "/base/adminlog/table/?page=1&limit=200" Forward the request and it will fetch all the admin logs. IDOR has been fixed in latest versions after 9.0.7-Build:Apr 4,2023.
Read more

GRANDING UTime Master - Stored XSS (CVE-2023-45391)

By -
Image
  Hi All, I was able to identify stored XSS in one online attendance system i.e. GRANDING UTime Master (v  UTime Master_9.0.7-Build:Apr 4,2023 ). CVE ID: CVE-2023-45391 UTime Master is a powerful web-based time and attendance management software that provides a stable connection to GRANDING’s standalone push communication devices by Ethernet/Wi-Fi/GPRS/3G and working as a private cloud to offer employee self-service by mobile application and web browser. Login to UTime Master using admin account Click on Personnel > Employee Management >Employee Select Any employee or create a new employee In First name Section embed you payload. For test case I used "/><img src=a onerror=alert(22)> XSS payload embedded in EMP NAME field. Save the employee details, Once the page refreshed it will execute your payload. our payload executed successfully. I have also observed multiple other fields are also vulnerable to XSS e.g. Device Name, Department etc. XSS has been fixed in la
Read more

Ericsson BSCS iX R18 Billing & Rating (ADMX, MX) - Stored XSS (CVE-2020-29144, CVE-2020-29145)

By -
Image
Dear Reader, I was able to identify stored XSS in multiple web base modules of Ericsson BSCS iX R18 Billing & Rating platform  Below are its details: # Software description: Ericsson Billing is a convergent billing solution for telecoms that combines an unrivaled combination of out-of-the box features and high configurability. As an evolution of the widely-installed Ericsson BSCS iX, Ericsson Billing provides a low-risk but effective route to capture and secure revenue streams and take advantage of business opportunities from both traditional telecom services as well as digital services, 5G and IoT. # Technical Details & Impact: There are multiple web base modules in BSCS iX e.g. ADMX, MX (monitoring center), CX etc. It was observed that ADMX and MX are vulnerable to stored XSS, In most test cases session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admin's browsers using beef
Read more