This script is Copyright (C) 2008-2011 Tenable Network Security, Inc.
The remote web server contains a module which may allow an attacker to
The remote IIS web server contains a vulnerability in the Server Hit
Hilight Module which may allow an attacker to view the contents of a
page otherwise requiring authentication.
An attacker may exploit this flaw to bypass authentication on certain
Upgrade to IIS 6
Risk factor :
Medium / CVSS Base Score : 4.3
CVSS Temporal Score : 3.6
Public Exploit Available : true