laptop and a wrench

Bug

There is a security vulnerability in ArcGIS Server Version 10 Image Service file resource.

Last Published: August 25, 2014 No Product Found
Bug ID Number NIM070323
SubmittedJuly 8, 2011
Last ModifiedJune 5, 2024
Applies toNo Product Found
Version found10.1
Version Fixed10.1
StatusFixed

Workaround

Download and apply "ArcGIS 10.0 SP2 (Server) Image Service file resource security Patch" to resolve this security vulnerability. If this patch cannot be installed, disable Image Service Download capability following the instructions given below: 1. Verify that ArcGIS Server service pack 10.0 SP1 or higher is installed. 2. Make an administrative connection to ArcGIS Server using ArcCatalog or ArcGIS Server Manager. 3. Stop the image service that is using a mosaic dataset. 4. In the Service Properties, under the Capabilities tab, uncheck option "Download" 5. Save the settings and restart the Service 6. Repeat the above steps for all image services that have the Download capability enabled. 7. Login to the REST API administrator and clear the REST cache.

Steps to Reproduce

Bug ID: NIM070323

Software:

  • No Product Found

Get notified when the status of a bug changes

Download the Esri Support App

Discover more on this topic

Esri Community

Search for related information

Training

Find training related to this topic

ArcGIS Ideas

Explore ideas and give feedback

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options