Detections
Analytics
WG080 IIS6 - A compiler must not be installed on a production web server. - 'msc.exe search'
Information
The presence of a compiler on a production server facilitates the malicious user's task of creating custom versions of programs and installing Trojan Horses or viruses.NOTE: This check only searches the 'C:' drive, if the system has multiple drives ensure each drive doesn't contain compilers.
Solution
Remove any compiler programs found on the production web server.See Also
http://iasecontent.disa.mil/stigs/zip/July2015/U_IIS_6-0_V6R16_STIG.zip
Item Details
Audit Name: DISA STIG IIS 6.0 Server v6r16
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7(4), CAT|II, Rule-ID|SV-38190r1_rule, STIG-ID|WG080_IIS6, Vuln-ID|V-2236
Plugin: Windows
Control ID: 00e1e8392bcd0a3ee598c6f60b84af25efef5d4ae65dae534e49ba67e214cd0a