WG080 IIS6 - A compiler must not be installed on a production web server. - 'msvc.exe search'

Information

The presence of a compiler on a production server facilitates the malicious user's task of creating custom versions of programs and installing Trojan Horses or viruses.
NOTE: This check only searches the 'C:' drive, if the system has multiple drives ensure each drive doesn't contain compilers.

Solution

Remove any compiler programs found on the production web server.

See Also

http://iasecontent.disa.mil/stigs/zip/July2015/U_IIS_6-0_V6R16_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(4), CAT|II, Rule-ID|SV-38190r1_rule, STIG-ID|WG080_IIS6, Vuln-ID|V-2236

Plugin: Windows

Control ID: 00e1e8392bcd0a3ee598c6f60b84af25efef5d4ae65dae534e49ba67e214cd0a