| VID |
27060 |
| Severity |
40 |
| Port |
135 |
| Protocol |
TCP |
| Class |
WMI |
| Detailed Description |
Directory listing transfers called default page to user when requested for some directory. But it shows whole file list if there is no default page. So Important file may expose to outside if directory listing is allowed.
* Platforms Affected:
Microsoft IIS Server |
| Recommendation |
¡á IIS 5.0, 6.0
1. Start> Run> INETMGR> Select website> Properties> Home Directory
2. Uncheck ¡°Directory Listing¡±
¡á IIS 7.0, 8.0, 10.0
1. Internet Information Service(IIS) Management> Website> IIS> Select¡°Directory Listing¡± and ¡°Disabled¡± |
| Related URL |
(CVE) |
| Related URL |
(SecurityFocus) |
| Related URL |
(ISS) |
|
