WebApp Sec mailing list archives

ISAPI Mappings on IIS?


From: "Mark G. Spencer" <mspencer () evidentdata com>
Date: Thu, 6 Nov 2003 14:22:46 -0800

Some of my web guys have sworn that they have disabled and/or removed the ISAPI mappings on IIS servers, yet ISAPI 
warnings (.htw, .printer, etc.) continue to show up when running Nessus, Nikto, or Kavado ScanDo against their IIS 
servers.

Any thoughts on this?  Maybe these ISAPI settings need to be killed somewhere outside of the administrative IIS screens?

Mark


Current thread: