Microsoft .NET Version Information Disclosure

This script is Copyright (C) 2007-2011 Tenable Network Security, Inc.


Synopsis :

It is possible to obtain the version number of the remote installation
of Microsoft .NET Framework.

Description :

By requesting a non-existent .aspx file on the remote web server, it
is possible to obtain the exact version number of the remote .NET
framework.

Solution :

Configure IIS to return custom error messages instead of the default
.NET error messages by setting the option 'customErrors mode' to 'On'
or 'RemoteOnly'.

Risk factor :

None

Family: Web Servers

Nessus Plugin ID: 24243 (dotnet_framework_version.nasl)

Bugtraq ID:

CVE ID: