Test Kennung:	1.3.6.1.4.1.25623.1.0.10576
Kategorie:	Web Servers
Titel:	Microsoft IIS Dangerous Default Files - Active Check
Zusammenfassung:	The file viewcode.asp is a default IIS files which can give a; malicious user a lot of unnecessary information about your file system or source files.;; Specifically, viewcode.asp can allow a remote user to potentially read any file on a webserver; hard drive.;; Example: http://example.com/pathto/viewcode.asp?source=../../../../../../autoexec.bat
Beschreibung:	Summary: The file viewcode.asp is a default IIS files which can give a malicious user a lot of unnecessary information about your file system or source files. Specifically, viewcode.asp can allow a remote user to potentially read any file on a webserver hard drive. Example: http://example.com/pathto/viewcode.asp?source=../../../../../../autoexec.bat Solution: If you do not need these files, then delete them, otherwise use suitable access control lists to ensure that the files are not world-readable. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0737 Microsoft Security Bulletin: MS99-013 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013 Microsoft Knowledge Base article: Q231656
Copyright	Copyright (C) 2000 John Lampe

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.