WebApp Sec mailing list archives

Global.asa security under IIS 6.0


From: Bénoni MARTIN <Benoni.MARTIN () libertis ga>
Date: Tue, 8 Jun 2004 09:17:53 +0100

Hi list !

I am wondering about how much secure is the "global.asa" file in ASP. It = seems that we can gather there most of the 
parameters used with our ASP = pages, but it can be also a weakness if a malicious guy gets access to = it !


So anyone one knows how secure is it to use global.asa, how can we get = it from a website (IIS refuses access to it 
with an = http://blahblahblah.com/global.asa)...and how can we avoid people = stealing if ?


Thanks in advance!


Current thread: