WEB_IIS Alternate Data streams ASP file access attempt

 

Code: p1125

Severity: Warning

 

Description: This event is generated when an attempt is made to access an Active Server Page (ASP) .asp file to disclose its contents.

Impact: Intelligence gathering activity. A vulnerability exists that discloses the .asp file contents when the file name is appended with "::$DATA".

Corrective: Upgrade to a more current version of IIS.