|
|
Family: Web Servers --> Category: infos
Microsoft .NET Version Information Disclosure Vulnerability Scan
Vulnerability Scan Summary
Checks for the version of the .NET framework
Detailed Explanation for this Vulnerability Test
Synopsis :
It is possible to obtain the version number of the more Microsoft .NET
Framework.
Description :
By requesting a non-existing .aspx file on the remote web server, it is
possible to obtain the exact version number of the remote .NET framework.
Solution :
Configure IIS to return custom error messages instead of the default .NET error
messages by setting the option 'customErrors mode' to 'On' or 'RemoteOnly'.
Threat Level:
None / CVSS Base Score : 0
(AV:R/AC:L/Au:NR/C:N/A:N/I:N/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
