漏洞类别:Web server漏洞等级:
漏洞信息
The remote Web server appears to be running with Frontpage Extensions. On a default installation of Frontpage Extensions, a virtual directory "/_vti_bin/" is created. Most scanner tools scan this directory because vulnerabilities have been found in Frontpage scripts.
Note that the detection of the presence of a directory is for the most part based on the return code in the HTTP responses to the HTTP requests such as "GET /directory/ HTTP/1.0" and may at times be unreliable.
漏洞危害
Unauthorized users can launch attacks on specific Frontage Extensions scripts.
解决方案
Remove all scripts that you do not need from the "/_vti_bin/" directory.
To best secure your server, you should also apply the latest Frontpage Service Pack, which is available for download fromMicrosoft's Web site.
0day
文章评论