The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

The file viewcode.asp is a default IIS files that can give a malicious user information about your file system or source files.  Specifically, viewcode.asp can allow a remote user to potentially read any file on a web server's hard drive.

The file viewcode.asp is a default IIS file that can give a malicious user information about your file system or source files.  Specifically, viewcode.asp can allow a remote user to potentially read any file on a web server's hard drive.

The file viewcode.asp is a default IIS file which can give a malicious user information about your file system or source files.  Specifically, viewcode.asp can allow a remote user to potentially read any file on a web server's hard drive.

The file viewcode.asp is a default IIS file which can give a malicious user a information about your file system or source files.  Specifically, viewcode.asp can allow a remote user to potentially read any file on a web server's hard drive.

The file viewcode.asp is a default IIS file that can give a malicious user a lot of unnecessary information about your file system or source files. Specifically, viewcode.asp can allow a remote user to potentially read any file on a web server hard drive.

ID	Name	Product	Family	Severity
1710	Microsoft IIS viewcode.asp Arbitrary File Access	Nessus Network Monitor	Web Servers	medium
1709	Microsoft IIS viewcode.asp Arbitrary File Access	Nessus Network Monitor	Web Servers	medium
1708	Microsoft IIS viewcode.asp Arbitrary File Access	Nessus Network Monitor	Web Servers	medium
1707	Microsoft IIS viewcode.asp Arbitrary File Access	Nessus Network Monitor	Web Servers	medium
1706	Microsoft IIS viewcode.asp Arbitrary File Access	Nessus Network Monitor	Web Servers	medium
1705	Microsoft IIS viewcode.asp Arbitrary File Access	Nessus Network Monitor	Web Servers	medium
1704	Microsoft IIS viewcode.asp Arbitrary File Access	Nessus Network Monitor	Web Servers	medium
10576	Microsoft IIS / Site Server viewcode.asp Arbitrary File Access	Nessus	Web Servers	medium

Detections

Analytics

CVE-1999-0737

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium