Detections
Analytics
Microsoft IIS WebHits null.htw .asp Source Disclosure
medium Nessus Plugin ID 10356
Synopsis
The remote web server is affected by an information disclosure vulnerability.Description
It is possible to get the source code of ASP scripts by issuing a specially crafted request.ASP source codes usually contain sensitive information such as usernames and passwords.
Solution
Apply the patches referenced above.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2000/ms00-006
Plugin Details
Severity: Medium
ID: 10356
File Name: ms_index_server.nasl
Version: 1.44
Type: remote
Family: Web Servers
Published: 4/1/2000
Updated: 11/15/2018
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.2
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
Vulnerability Information
Required KB Items: Settings/ParanoidReport, www/ASP
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 1/27/2000
Reference Information
CVE: CVE-2000-0097, CVE-2000-0302