We are excited to announce that the IIS.NET Forums are moving to the new Microsoft Q&A experience. Learn more >

Warning 1309, ASP.NET 4.0.30319.0 [Answered]RSS

4 replies

Last post Mar 19, 2021 12:40 AM by mario_nz

‹ Previous Thread|Next Thread ›
  • Warning 1309, ASP.NET 4.0.30319.0

    Mar 17, 2021 12:57 AM|mario_nz|LINK

    Hi,

    I've noticed this warning every 25 minutes on my server 2012R2. I do not have any problems with anything, at least I've not noticed any, but not sure what is causing it. Can someone help me? Thank you

    Event code: 3005 
    Event message: An unhandled exception has occurred. 
    Event time: 17/03/2021 10:54:31 a.m. 
    Event time (UTC): 16/03/2021 9:54:31 p.m. 
    Event ID: 13e6455b069b418b8d3036db2df142f6 
    Event sequence: 2413 
    Event occurrence: 991 
    Event detail code: 0 
     
    Application information: 
        Application domain: /LM/W3SVC/1/ROOT-3-132599694692667439 
        Trust level: Full 
        Application Virtual Path: / 
        Application Path: C:\inetpub\wwwroot\ 
        Machine name: XXXXXX
     
    Process information: 
        Process ID: 12476 
        Process name: w3wp.exe 
        Account name: NT AUTHORITY\SYSTEM 
     
    Exception information: 
        Exception type: ArgumentNullException 
        Exception message: Value cannot be null.
    Parameter name: s
       at System.Convert.FromBase64String(String s)
       at ASP.aspnet_client_supp0rt_aspx.Page_Load()
       at System.Web.UI.Control.OnLoad(EventArgs e)
       at System.Web.UI.Control.LoadRecursive()
       at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

     
     
    Request information: 
        Request URL: https://autodiscover.xxxxxxxxx.co.xx:443/aspnet_client/supp0rt.aspx 
        Request path: /aspnet_client/supp0rt.aspx 
        User host address: xxx.xxx.xxx.xxx 
        User:  
        Is authenticated: False 
        Authentication Type:  
        Thread account name: NT AUTHORITY\SYSTEM 
     
    Thread information: 
        Thread ID: 75 
        Thread account name: NT AUTHORITY\SYSTEM 
        Is impersonating: False 
        Stack trace:    at System.Convert.FromBase64String(String s)
       at ASP.aspnet_client_supp0rt_aspx.Page_Load()
       at System.Web.UI.Control.OnLoad(EventArgs e)
       at System.Web.UI.Control.LoadRecursive()
       at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
     
    Custom event details: 
    - System 

      - Provider 

       [ Name]  ASP.NET 4.0.30319.0 
     
      - EventID 1309 

       [ Qualifiers]  32768 
     
       Level 3 
     
       Task 3 
     
       Keywords 0x80000000000000 
     
      - TimeCreated 

       [ SystemTime]  2021-03-17T00:54:14.000000000Z 
     
       EventRecordID 21771272 
     
       Channel Application 
     
       Computer XXXXXX.xxxxxx.local 
     
       Security 
     

    - EventData 

       3005 
       An unhandled exception has occurred. 
       17/03/2021 1:54:14 p.m. 
       17/03/2021 12:54:14 a.m. 
       090676a7fdb24ad38e0828ec2a75fb74 
       43 
       8 
       0 
       /LM/W3SVC/1/ROOT-3-132604143497063499 
       Full 
       / 
       C:\inetpub\wwwroot\XXXXX 
        
       12716 
       w3wp.exe 
       NT AUTHORITY\SYSTEM 
       ArgumentNullException 
       Value cannot be null. Parameter name: s at System.Convert.FromBase64String(String s) at ASP.aspnet_client_supp0rt_aspx.Page_Load() at System.Web.UI.Control.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)  
       https://autodiscover.xxxxxxx.co.xx:443/aspnet_client/supp0rt.aspx 
       /aspnet_client/supp0rt.aspx 
       159.89.222.138 
        
       False 
        
       NT AUTHORITY\SYSTEM 
       25 
       NT AUTHORITY\SYSTEM 
       False 
       at System.Convert.FromBase64String(String s) at ASP.aspnet_client_supp0rt_aspx.Page_Load() at System.Web.UI.Control.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)  

  • Re: Warning 1309, ASP.NET 4.0.30319.0

    Mar 18, 2021 02:22 AM|samwu|LINK

    Hi mario_nz,

    mario_nz

    Exception information: 
        Exception type: ArgumentNullException 
        Exception message: Value cannot be null.

    The exception message clearly states that the value of ArgumentNullException cannot be null. please check whether the value of ArgumentNullException is null, and can you work properly locally? Or does this error only appear when published on iis?

    Best regards,

    Sam

    IIS.NET forums are moving to a new home on Microsoft Q&A, we encourage you to go to Microsoft Q&A for .NET for posting new questions and get involved today. Learn more >
  • Re: Warning 1309, ASP.NET 4.0.30319.0

    Mar 18, 2021 02:28 AM|mario_nz|LINK

    Hi Sam,

    Yes, I assume that is the problem. But my problem is that I didn't change anything, except win updates. I do not know where to look for this error. Are you able to point me? Also, as I've said I didn't notice any problems with server except for this error in logs. Thanks

  • Re: Warning 1309, ASP.NET 4.0.30319.0

    Mar 19, 2021 12:23 AM|mario_nz|LINK

    Additional update: Between 3-6 March these filese were created in c:\inetpub\wwwrot\aspnet_client\supp0rt.aspx and sol.aspx. Also, in file folder c:\inetpub\wwwrot\aspnet_client\system_web\bSZMQltq.aspx

    These file were not there before that and there was no error at that time.

    I've backup which I've restored on test machine and compared difference.

    I've not done that. Does somebody have idea how those files were created? Thanks

  • Re: Warning 1309, ASP.NET 4.0.30319.0

    Mar 19, 2021 12:40 AM|mario_nz|LINK

    This is all part of exploitation of four Microsoft Exchange Server vulnerabilities: CVE-2021-26855, CVE-2021-26857, CVE-2021-26858 and CVE-2021-27065.

    Please read it here and apply patches as soon as possible:

    Link 1

    Link 2

    Link 3

‹ Previous Thread|Next Thread ›