Detections
Analytics

Microsoft FrontPage Unpassworded Installation

high Nessus Plugin ID 11455

Language:

Synopsis

The remote web server is configured insecurely.

Description

The remote web server appears to have FrontPage Extensions installed with incorrectly set permissions. A remote attacker could exploit this to modify web pages on the server.

Solution

If FrontPage is being used to administer the website, tighten the permissions. If not, remove the _vti_* directories and _vti_inf.html.
Refer to the advisory for more information.

See Also

http://www.nessus.org/u?da14142c

Plugin Details

Severity: High

ID: 11455

File Name: frontpage_passwordless.nasl

Version: Revision: 1.21

Type: remote

Family: Web Servers

Published: 4/4/2003

Updated: 9/21/2012

Supported Sensors: Nessus