 |
|
WEB_IIS Alternate Data streams ASP file access attempt
|
| |
Code:
p1125
Severity: Warning
Description:
This event is generated when an attempt is made to access an Active Server Page (ASP) .asp file to disclose its contents.
Impact:
Intelligence gathering activity. A vulnerability exists that discloses the .asp file contents when the file name is appended with "::$DATA".
Corrective:
Upgrade to a more current version of IIS.
|