WEB_IIS ISAPI .ida attempt

 

Code: p1118

Severity: Warning

 

Description: This event is generated when an attempt is made to access the .ida Indexing Service ISAPI filter.

Impact: Remote access. This attack may allow execution of arbitrary commands in System context providing complete control of the server.

Corrective: Consider removing the .ida ISAPI filter if it is not necessary. Download and install the appropriate patch mentioned in the Microsoft bulletin.