Home
Security Hardening
DISA STIG IIS 6.0 Site Checklist V6R16

DISA STIG IIS 6.0 Site Checklist V6R16

WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘.asa’
Details Owing to the nature of .inc files, which may contain sensitive logic and potentially reveal sensitive information about the...
WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘.asax’
Details Owing to the nature of .inc files, which may contain sensitive logic and potentially reveal sensitive information about the...
WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘global.asa’
Details Owing to the nature of .inc files, which may contain sensitive logic and potentially reveal sensitive information about the...
WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘global.asax’
Details Owing to the nature of .inc files, which may contain sensitive logic and potentially reveal sensitive information about the...
WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘.inc’
Details Owing to the nature of .inc files, which may contain sensitive logic and potentially reveal sensitive information about the...
WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘.inc file permissions’
Details Owing to the nature of .inc files, which may contain sensitive logic and potentially reveal sensitive information about the...
WA000-WI050 IIS6 – Unused and vulnerable script mappings in IIS 6 must be removed. – ‘Allowed Web Service Extensions’
Details IIS file extensions which require server-side processing, but which have been deemed vulnerable, include .htr, .htw, .ida, .idc, .idq,...
WA000-WI092 IIS6 – The IIS web site permissions ‘Write’ or ‘Script Source’ must not be selected. – ‘Script Source permission check’
Details Web site permissions to include Read, Write, and Script Source Access can be set within the IIS Administration tool....
WA000-WI092 IIS6 – The IIS web site permissions ‘Write’ or ‘Script Source’ must not be selected. – ‘Write permission check’
Details Web site permissions to include Read, Write, and Script Source Access can be set within the IIS Administration tool....
WA000-WI120 IIS6 – The Content Location header must not contain proprietary IP addresses.
Details When using static HTML pages, a Content-Location header is added to the response. By default, Internet Information Server (IIS)...

DISA STIG IIS 6.0 Site Checklist V6R16

WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘.asa’

WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘.asax’

WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘global.asa’

WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘global.asax’

WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘.inc’

WA000-WI030 IIS6 – The IUSR_machinename account must not have read access to the .inc files or their equivalent. – ‘.inc file permissions’

WA000-WI050 IIS6 – Unused and vulnerable script mappings in IIS 6 must be removed. – ‘Allowed Web Service Extensions’

WA000-WI092 IIS6 – The IIS web site permissions ‘Write’ or ‘Script Source’ must not be selected. – ‘Script Source permission check’

WA000-WI092 IIS6 – The IIS web site permissions ‘Write’ or ‘Script Source’ must not be selected. – ‘Write permission check’

WA000-WI120 IIS6 – The Content Location header must not contain proprietary IP addresses.