I must blame Mircosoft for this silly fault. In the absence of a default page, the web server can just return a 404 error code of page not found. It is much safer than revealing the server and web OS.
2007/02/02
IIS under construction
If you are a system administrator and you have started the IIS server but the web pages are not ready, it is important to put an index.html something like "This site is currently under construction". If not, look at the screen below. It tells people that you are using Mircosoft IIS Web Server. This is a vulnerability to disclose the server and web OS to visitors.
I must blame Mircosoft for this silly fault. In the absence of a default page, the web server can just return a 404 error code of page not found. It is much safer than revealing the server and web OS.
I must blame Mircosoft for this silly fault. In the absence of a default page, the web server can just return a 404 error code of page not found. It is much safer than revealing the server and web OS.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment