26 reputation
4
bio website
location
age
visits member for 1 year, 9 months
seen Nov 2 '12 at 12:13

Oct
26
revised Security issues in a Dotnet Web application
improve formatting
Oct
26
revised Security issues in a Dotnet Web application
more precise
Oct
26
awarded  Editor
Oct
26
revised Security issues in a Dotnet Web application
improve formatting
Oct
26
comment Security issues in a Dotnet Web application
ModSecurity seems to be a good tool, but stay Beta on IIS. I am affraid to be in position to require rollback without knowing how.
Oct
26
awarded  Supporter
Oct
26
awarded  Teacher
Oct
26
answered Security issues in a Dotnet Web application
Oct
25
comment Security issues in a Dotnet Web application
@Hammon, related to issue 2 (exposition of information of authotizing programs, etc.). html files in C:\inetpub\wwwroot can be retrieved by TELNET, for example GET /_vti_inf.html HTTP/1.1. I renamed _vti_inf.html, and of course it is not visible by the above command. Should I change the permissions of the folder wwwroot. Hints?
Oct
25
comment Security issues in a Dotnet Web application
@AviD: Just to notify you about my previous comment
Oct
25
comment Security issues in a Dotnet Web application
If you think that my question should be moved, please do so. I am new at this site, so you'll make a better decision.
Oct
24
comment Security issues in a Dotnet Web application
Thank you Hammo. I am working on it. kb/218180 bring me to another more detailed fix at blogs.msdn.com/b/webtopics/archive/2008/11/18/… for the IP addrees exposure (issue 3).
Oct
24
awarded  Student
Oct
24
asked Security issues in a Dotnet Web application