On Fri, Nov 29, 2002 at 08:43:05AM +1300, Jason Haar wrote:
> On Tue, Nov 26, 2002 at 03:11:42PM -0600, H D Moore wrote:
> > You definately want to look into it. The "iiscrack.dll" exploit needs to
>
> It also may be a false positive.
>
> I've found that a large number of IIS installs don't return HTTP 404 error
> codes on "File not found", but instead return 200 and an HTML page saying
> "File not found" :-/
Nessus is supposed to have countermeasures for that (no404.nasl)
-- Renaud
-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.
