IIS listens to port 80 on 0.0.0.0

From: Sarbjit Singh Gill (ssgill@gilltechnologies.com)
Date: 09/24/02 

From: "Sarbjit Singh Gill" <ssgill@gilltechnologies.com>
To: <security-basics@lists.securityfocus.com>
Date: Tue, 24 Sep 2002 17:04:42 +0800

Greetings,

Recently I realized that my IIS was not responding to port 80 requests.

After running active ports, realized it was only listening to port 80 on
0.0.0.0

It is a w2k pro, sp2 patched with pre-sp3 hot fixes, and zone alarm.
executed IIS Lockdown and BASELINE from Microsoft. I Discovered this
recently because I installed Visual Studio .NET hence I ran the IIS lockdown
to enable the IIS again. Previously IIS was disabled.

Is this a security issue or just miss-configuration of the w2k pro.

Cheers
Gill

Relevant Pages

  • Re: Exchange; ISA and IIS
    ... and you create some kind of rule in ISA to foward incoming ... requests on port 80, to the port that IIS is using. ... You can getting the errors at the moment because ISA is listening on port 80 ...
    (microsoft.public.inetserver.iis.security)
  • Re: 127.0.0.1 page cannot be displayed
    ... another application listening on port 80. ... > IIS is installed and working, in properties all unassigned is selected, ... > I get a reply when i ping 127.0.0.1 and localhost pings and reply from ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: 127.0.0.1 page cannot be displayed
    ... If this was done after you shut down IIS it would be normal I suspect. ... If you don't have at least one task listening ... BTW since your problem seems to be more to do with getting the server ... >> check for another application bound to port 80 ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Am I hacked? IIS dying, telnet localhost 443 gives: Hallo, Willkommen auf Compactzone Stro!
    ... I posted yesterday about my IIS dying. ... General consensus and mosts docs on the 115 error say something is ... listening on my http/https ports, however, netstat does not show ... access to either port 80 or 443 gets a page cannot be displayed error. ...
    (microsoft.public.inetserver.iis)
  • Am I hacked? IIS dying, telnet localhost 443 gives: Hallo, Willkommen auf Compactzone Stro!
    ... I posted yesterday about my IIS dying. ... General consensus and mosts docs on the 115 error say something is ... listening on my http/https ports, however, netstat does not show ... access to either port 80 or 443 gets a page cannot be displayed error. ...
    (microsoft.public.inetserver.iis.security)