(PVS) Signatures - Tenable Network Security

Description: The file viewcode.asp is a default IIS file that can give a malicious user information about
your file system or source files. Specifically, viewcode.asp can allow a remote user to
potentially read any file on a web server's hard drive.
Solution: Delete the file if not needed or use suitable access control lists to ensure that the file is not
world readable.
CVE-1999-0737
Microsoft IIS viewcode.asp Arbitrary File Access
PVS ID: 1709 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:10576
Description: The file viewcode.asp is a default IIS file that can give a malicious user information about
your file system or source files. Specifically, viewcode.asp can allow a remote user to
potentially read any file on a web server's hard drive.
Solution: Delete the file if not needed or use suitable access control lists to ensure that the files are
not world readable.
CVE-1999-0737
Microsoft IIS viewcode.asp Arbitrary File Access
PVS ID: 1710 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:10576
Description: The file viewcode.asp is a default IIS files that can give a malicious user information about
your file system or source files. Specifically, viewcode.asp can allow a remote user to
potentially read any file on a web server's hard drive.
Solution: Delete the file if not needed or use suitable access control lists to ensure that the files are
not accessible without credentials.
CVE-1999-0737
ION ion-p.exe Traversal File Access
PVS ID: 1711 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:11729
Description: The ion-p.exe file exists on this web server. Some versions of this file are vulnerable to
remote exploit.
Solution: No solution is known at this time.
CVE-2002-1559
Passive Vulnerability Scanner (PVS) Signatures
Netdynamics ndcgi.exe Previous User Session Replay
Family Internet Services 435