Information
Vulnerability Key: V0013705
IA Controls: ECSC-1 Security Configuration Compliance
Categories: 2.2 Least Privilege
Severity: Category II
Ref: WEB SERVER SECURITY TECHNICAL IMPLEMENTATION GUIDE Section 2.1
A worker process handles all application execution, including authentication and authorization, as well
as ISAPI filter and extension loading. This executable process is called W3WP.exe. When acting as
the worker process manager, the www service is responsible for controlling the lifetime of all worker
processes that are processing requests. The management console allows it to configure options such
as when to start or recycle a worker process, how many requests to serve before recycling, and what
to do if the worker becomes blocked or unable to continue processing requests.