Microsoft .NET Custom Errors Not Set

This script is Copyright (C) 2007-2013 Tenable Network Security, Inc.


Synopsis :

The remote ASP.NET web server does not have custom errors set

Description :

The remote ASP.NET web server is configured to show verbose
error messages, which might lead to the disclosure of potentially
sensitive information about the remote installation (such as the
path under which the remote web server resides) or about the
remote ASP.NET applications.

Solution :

Configure the server so that the option 'customErrors mode' is set
to 'On' instead of 'Off'

Risk factor :

Medium / CVSS Base Score : 4.3
(CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N)

Family: Web Servers

Nessus Plugin ID: 24244 (dotnet_framework_custom_errors.nasl)

Bugtraq ID:

CVE ID:

Ready to Scan Unlimited IPs & Run Compliance Checks?

Upgrade to Nessus Professional today!

Buy Now

Combine the Power of Nessus with the Ease of Cloud

Start your free Nessus Cloud trial now!

Begin Free Trial