Microsoft .NET Custom Errors Not Set

This script is Copyright (C) 2007-2013 Tenable Network Security, Inc.


Synopsis :

The remote ASP.NET web server does not have custom errors set

Description :

The remote ASP.NET web server is configured to show verbose
error messages, which might lead to the disclosure of potentially
sensitive information about the remote installation (such as the
path under which the remote web server resides) or about the
remote ASP.NET applications.

Solution :

Configure the server so that the option 'customErrors mode' is set
to 'On' instead of 'Off'

Risk factor :

Medium / CVSS Base Score : 4.3
(CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N)

Family: Web Servers

Nessus Plugin ID: 24244 (dotnet_framework_custom_errors.nasl)

Bugtraq ID:

CVE ID: