Security

Ask something
Discussion Locked

404 Path disclosure in IIS 6.0

0 helpful
1 reply

by lsmith1989 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
When I scan my SMS 2003 Site Server with GFI Languard, there is a medium level vulnerability that shows up. Its the "Web 404 path disclosure" vulnerability. Anyone know how I can remedy that? I've tried googling it and technet and even followed the link that GFI 6.0 provides but cannot find any good info on how to fix the vulnerability.

1 reply

by tony hopkinson

but one of the server property pages has a list of the standard status codes and the text put out with them. Change it there and you're OK.
Personally I wouldn't even tell them you were using IIS.
Page not found is perfectly adequate.

This discussion is closed to new replies.