DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.
  • Search Forums
    Advanced Search
Prev
Next
Forums Using DNN Platform Administration and Configuration

DotNetNuke, DCOM, Juicy Potato

 3 Replies
 1 Subscribed to this topic
 40 Subscribed to this forum
Sort:
Author
Messages
TechieMD
Growing Member
Posts: 37
Growing Member
1/1/2020 5:07 PM

Plesk is showing my server may be vulnerable to Juicy Potato exploit.  

Apparently disabling DCOM on server will fix this.  The only other fix is to upgrade to Windows Server 2019.

1. Does DNN need DCOM enabled? 

2. If yes, is the only option to protect my server upgrading to 2019?

Michael Tobisch
Veteran Member
Posts: 1182
Veteran Member
MVP
MVP
You're an MVP!
1/2/2020 3:11 AM
Hi,

as far as I know, DCOM is not necessary for DNN - saying that, it could be possible that one of the 3rd party extensions you use or anything else on the server needs DCOM (and I can't say anything about that, as I don't know about it).

I would try to turn it off and see what happens, but check if the Plesk components (or anything you use to access your server) need DCOM before you do that, otherwise you will lock out yourself...

Happy DNNing!
Michael

Michael Tobisch
DNN★MVP

DNN Connect
0
liked by Members
Deleted User
New Around Here
Posts: 0
New Around Here
1/2/2020 6:21 AM

Here are the instructions How to disable DCOM support in Windows. I have it disabled and DNN runs fine.

Mark Buelsing
Growing Member
Posts: 80
Growing Member
1/3/2020 11:30 AM

My hosting company, DNN4Less.com, patched my server as soon as Juicy Potato was announced. 

These Forums are for the discussion of the open source CMS DNN platform and ecosystem.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. If you have (suspected) security issues, please DO NOT post them in the forums but instead follow the official DNN security policy. 
  2. No Advertising. This includes the promotion of commercial and non-commercial products or services which are not directly related to DNN.
  3. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  4. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  5. No Flaming or Trolling.
  6. No Profanity, Racism, or Prejudice.
  7. Site Moderators have the final word on approving / removing a thread or post or comment.
  8. English language posting only, please.

Would you like to help us?

Awesome! Simply post in the forums using the link below and we'll get you started.

Get Involved