Detections
Analytics

WA000-WI070 IIS6 - Indexing Services must only index web content.

Information

The indexing service can be used to facilitate a search function for web sites. Enabling indexing may facilitate a directory traversal exploit and reveal unwanted information to a malicious user. Indexing must be limited to web document directories only.
NOTE: If Indexing Service is running, verify only web content directories are being indexed.

Solution

Assure that only the web document directories are indexed.

See Also

http://iasecontent.disa.mil/stigs/zip/July2015/U_IIS_6-0_V6R16_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CAT|III, Rule-ID|SV-38011r1_rule, STIG-ID|WA000-WI070_IIS6, Vuln-ID|V-3963

Plugin: Windows

Control ID: fdbca5d3af50e05992ce7b4e44734c607b27796f5482fdd1cce57cab961cc884