WG190 IIS6 - The web server must use a vendor-supported version of the web server software.

Information

The web server Software, IIS 6, is no longer supported by Microsoft for security updates and is not evaluated or updated for vulnerabilities, leaving it open to potential attack. Organizations must transition to a supported IIS release to ensure continued support.

Solution

Upgrade Microsoft IIS to a supported version.

See Also

http://iasecontent.disa.mil/stigs/zip/July2015/U_IIS_6-0_V6R16_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2c., CAT|I, Rule-ID|SV-38193r2_rule, STIG-ID|WG190_IIS6, Vuln-ID|V-2246

Plugin: Windows

Control ID: 2fba452a521090f8446a107cbd54cd4a4458bf65790a09d4b8723020bc3a089d