How do I perform a risk assessment on a . . . .

From: ProfesseurWoo@aol.com
Date: 09/24/01 

Date: Mon, 24 Sep 2001 17:26:33 EDT
From: ProfesseurWoo@aol.com
Subject: How do I perform a risk assessment on a . . . . 
To: <security-basics@securityfocus.com>
Message-ID: <16e.161a85c.28e0ff09@aol.com>

We have processes (Compaq Insight Manager, for example) that have embedded web servers in the program. They do not use IIS. I know ways to test for vulnerabilities in IIS servers, but how exactly do I do a risk assessment on an NT server with webbish abilities but some other set of .dlls?

Thanks!