ID de Prueba:	1.3.6.1.4.1.25623.1.0.10356
Categoría:	CGI abuses
Título:	Microsoft's Index server reveals ASP source code
Resumen:	NOSUMMARY
Descripción:	Description: It is possible to get the source code of ASP scripts by issuing the following request : GET /null.htw?CiWebHitsFile=/default.asp%20&CiRestriction=none&CiHiliteType=Full ASP source codes usually contain sensitive information such as usernames and passwords. Solution : If you need the functionality provided by WebHits, then install the patch available at : http://www.microsoft.com/technet/security/bulletin/ms00-006.mspx If you do not need this functionality, then unmap the .htw extensions from webhits.dll using the Internet Service Manager MMC snap-in. Risk factor : High
Referencia Cruzada:	BugTraq ID: 1084 BugTraq ID: 950 Common Vulnerability Exposure (CVE) ID: CVE-2000-0302 http://www.securityfocus.com/bid/1084 Bugtraq: 20000331 Alert: MS Index Server (CISADV000330) (Google Search) http://marc.info/?l=bugtraq&m=95453598317340&w=2 Microsoft Security Bulletin: MS00-006 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006 http://www.osvdb.org/271 XForce ISS Database: http-indexserver-asp-source Common Vulnerability Exposure (CVE) ID: CVE-2000-0097 http://www.securityfocus.com/bid/950 http://www.osvdb.org/1210 XForce ISS Database: http-indexserver-dirtrans
Copyright	This script is Copyright (C) 2000 Renaud Deraison

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.