General discussion


404 Path disclosure in IIS 6.0

By lsmith1989 ·
When I scan my SMS 2003 Site Server with GFI Languard, there is a medium level vulnerability that shows up. Its the "Web 404 path disclosure" vulnerability. Anyone know how I can remedy that? I've tried googling it and technet and even followed the link that GFI 6.0 provides but cannot find any good info on how to fix the vulnerability.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

Can't remember exactly where

by Tony Hopkinson In reply to 404 Path disclosure in II ...

but one of the server property pages has a list of the standard status codes and the text put out with them. Change it there and you're OK.
Personally I wouldn't even tell them you were using IIS.
Page not found is perfectly adequate.

Related Discussions

Related Forums