Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

A vendor is asking me to change the PSLanguageMode from within IIS on my Exchange server(s).

What potential vulnerabilities am I opening myself up to?

I'm surprised to see this option present within IIS. What other locations can I set PSLanguageMode? (Machine.config, etc)

share|improve this question

I would look on MsDN and for any IIS vulnerabilities first since IIS is usually the target du jour for hackers.

Then look for the PS module specifics to check if they are screwed up after a recent update or something esoteric -- I would be wary of Unicode and any of the larger character sets -- have him point you to the KB suggesting the changes and do your due diligence first.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.