Test ID:	1.3.6.1.4.1.25623.1.0.10491
Category:	Web application abuses
Title:	ASP/ASA source using Microsoft Translate f: bug
Summary:	downloads the source of IIS scripts such as ASA,ASP
Description:	There is a serious vulnerability in Windows 2000 (unpatched by SP1) that allows an attacker to view ASP/ASA source code instead of a processed file. ASP source code can contain sensitive information such as username's and passwords for ODBC connections. Solution : install all the latest Microsoft Security Patches (Note: This vulnerability is eliminated by installing Windows 2000 Service Pack 1)
Cross-Ref:	BugTraq ID: 1578 Common Vulnerability Exposure (CVE) ID: CVE-2000-0778 http://www.microsoft.com/technet/security/bulletin/MS00-058.asp Bugtraq: 20000815 Translate:f summary, history and thoughts (Google Search) http://www.securityfocus.com/templates/archive.pike?list=1&msg=080D5336D882D211B56B0060080F2CD696A7C9@beta.mia.cz http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=ntbugtraq&F=&S=&P=5212 http://www.securityfocus.com/bid/1578 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:927
Copyright	This script is Copyright (C) 2000 Alexander Strouk

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: