This script is Copyright (C) 2007-2013 Tenable Network Security, Inc.
The remote ASP.NET web server does not have custom errors set
The remote ASP.NET web server is configured to show verbose
error messages, which might lead to the disclosure of potentially
sensitive information about the remote installation (such as the
path under which the remote web server resides) or about the
remote ASP.NET applications.
Configure the server so that the option 'customErrors mode' is set
to 'On' instead of 'Off'
Risk factor :
Medium / CVSS Base Score : 4.3
Family: Web Servers
Nessus Plugin ID: 24244 (dotnet_framework_custom_errors.nasl)
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now