Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

A vendor is asking me to change the PSLanguageMode from within IIS on my Exchange server(s).

What potential vulnerabilities am I opening myself up to?

I'm surprised to see this option present within IIS. What other locations can I set PSLanguageMode? (Machine.config, etc)

share|improve this question
add comment

1 Answer

I would look on MsDN and support.microsoft.com for any IIS vulnerabilities first since IIS is usually the target du jour for hackers.

Then look for the PS module specifics to check if they are screwed up after a recent update or something esoteric -- I would be wary of Unicode and any of the larger character sets -- have him point you to the KB suggesting the changes and do your due diligence first.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.