Nessus Plugin #10573

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

IIS 5.0 Sample App reveals physical path of web root

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2000 Matt Moore

Summary:

IIS 5.0 Sample App reveals physical path of web root

Version:

$Revision: 1.10 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

A sample application shipped with IIS 5.0 discloses
the physical path of the web root. An attacker can use this information
to make more focused attacks.

Solution: Always remove sample applications from productions servers.
In this case, remove the entire /iissamples folder.
Risk factor : Low