IIS Lockdown Wizard 2.1
From: Liss, John (lissj@COMMERCEPATH.COM)Date: 12/18/01
- Previous message: Steen Larsen: "MS01-058 exploit - W32/Cool.A-mm"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 18 Dec 2001 09:37:48 -0800 From: "Liss, John" <lissj@COMMERCEPATH.COM> To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
For all the IIS nuts out there that love tools to lock things down. MS Has
released a new flavor of their IIS Lockdown tool. Though I haven't tested
it yet, it appears that they took the URLScanner and squashed it into to it,
as well as giving some templates for the major IIS-dependent products.
I have heard, (have not tested) that you do need to apply the (now regular)
hot fixes after you have applied the IIS Lockdown wizard fixes.
You can download the wizard from Microsoft's Web site.
http://www.microsoft.com/downloads/release.asp?releaseid=33961
More info:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
tools/locktool.asp
and of course the good old check list pages:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
tools/tools.asp
============================================================================
Delivery co-sponsored by VeriSign - The Internet Trust Company
============================================================================
Protect your servers with 128-bit SSL encryption!
Get VeriSign's FREE guide, "Securing Your Web Site for Business." You will
learn everything you need to know about using SSL to encrypt your e-commerce
transactions for serious online security. Click here!
http://www.verisign.com/cgi-bin/go.cgi?a=n016065650057000
============================================================================
- Previous message: Steen Larsen: "MS01-058 exploit - W32/Cool.A-mm"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
