[prev in list] [next in list] [prev in thread] [next in thread] 

List:       nessus
Subject:    Re: IIS  information disclosure
From:       "Pierre Vandevenne" <pierre () datarescue ! be>
Date:       2000-10-30 17:01:53
[Download RAW message or body]

> IM working as a project manager at AVNET DATA SECURITY LTD. 
> On a recent check of my web site with NESSUS, it returned that the web server type \
> and version are available. (IIS 4.0)  u can do the same thing with telnet to port \
> 80 and with a command of HEAD/  HTTP/1.0. do u know any way to change this \
> infomation?!?!?!?

Last time I checked this (IIS 3), I simply patched the binary. Could be
illegal though and there could be another way, but still, it worked.

Kind Regards
---
Pierre Vandevenne - DataRescue sa/nv
Home of the IDA Pro Disassembler
http://www.datarescue.com/idabase/ida.htm


[prev in list] [next in list] [prev in thread] [next in thread]