Microsoft .NET Version Information Disclosure

This script is Copyright (C) 2007-2011 Tenable Network Security, Inc.

Synopsis :

It is possible to obtain the version number of the remote installation
of Microsoft .NET Framework.

Description :

By requesting a non-existent .aspx file on the remote web server, it
is possible to obtain the exact version number of the remote .NET

Solution :

Configure IIS to return custom error messages instead of the default
.NET error messages by setting the option 'customErrors mode' to 'On'
or 'RemoteOnly'.

Risk factor :


Family: Web Servers

Nessus Plugin ID: 24243 (dotnet_framework_version.nasl)

Bugtraq ID:


Ready to Scan Unlimited IPs & Run Compliance Checks?

Upgrade to Nessus Professional today!

Buy Now

Combine the Power of Nessus with the Ease of Cloud

Start your free Nessus Cloud trial now!

Begin Free Trial