Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 210
  • Last Modified:

Web user able to view contents of the folder

I have a webpage the uses a folder structure such as

http://www.mysite.com/myfolder/page.asp

when I type in

http://www.mysite.com/myfolder 
I am able to see all the pages tha tin that folder.  THis is a MAJOR security risk, being some of the pages are for administrators.  Any help?  I am using IIS 6

Thanks
0
mark951
Asked:
mark951
  • 3
2 Solutions
 
gecko_au2003Commented:
http://support.microsoft.com/kb/324066/EN-US/

http://www.windowsitpro.com/Web/Article/ArticleID/7853/7853.html

http://www.clublk.us/postp29636.html

Other then that just set the security settings for the folders you do not want other users to be able to access / view.

Let me know if these help you out any :)
0
 
Ralf KlattPrincipal ConsultantCommented:
Hi,

You'd probably better place your IIS question at http://www.experts-exchange.com/Web/Web_Servers/IIS/

The links Gecko provided will give you lots of information ... as a small addon to Gecko's suggestions have a look at the Access-Control Process: http://www.microsoft.com/resources/documentation/IIS/6/all/techref/en-us/iisRG_SEC_19.mspx

If this is also about disabling certain applications on IIS level you might find this suggestion useful:
Please open your IIS Service Manager and expand the "Main Site" tree ... there you choose the site you're up to modify, right click and select "Properties ...

Screenshot: http://www.vb-development.de/exex/YourWeb_Properties.jpg

... on the virtual directory tab you choose "Configuration" ...

Screenshot: http://www.vb-development.de/exex/application_configuration.jpg

... there you'll find "Extension", "Executable Path" and "Verbs" (the screenshots are of IIS5 because my DC has an English OS, on my clients I only have German IIS6 versions running -> but that specific part is equal from IIS5 to IIS6!) ...


Best regards,
Raisor
0
 
gecko_au2003Commented:
Raisor strikes again LOL J/K. Anyway I hope our suggestions help you out !
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now