| VID |
21189 |
| Severity |
40 |
| Port |
80, ... |
| Protocol |
TCP |
| Class |
CGI |
| Detailed Description |
You can view the ASP script's source code with address ::$DATA (like GET /default.asp::$DATA) at the rear of request on the IIS web server. Most of ASP source code include sensitive infomations like log name or password. |
| Recommendation |
Download the latest version of Microsoft Security Patch and install it |
| Related URL |
CVE-1999-0278 (CVE) |
| Related URL |
149 (SecurityFocus) |
| Related URL |
1125 (ISS) |
|
