Signature Detail
Short Name |
HTTP:FRONTPAGE:AUTH-PWD-PROBE |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
Frontpage Authors.pwd Probe |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Frontpage Authors.pwd Probe
This signature detects requests for Microsoft FrontPage password files that can be used to gain sensitive user information.
Extended Description
It has been reported that Microsoft Exchange Server 2003 may be prone to a weakness when Microsoft Windows SharePoint Services 2.0 is installed on a machine running both Exchange Server 2003 and Microsoft Windows Server 2003. This installation may cause the Kerberos authentication employed by the server to be disabled in IIS (Internet Information Services) resorting to NTLM.
Affected Products
- Microsoft Exchange Server 2003
- Microsoft Windows Server 2003 Datacenter Edition
- Microsoft Windows Server 2003 Datacenter Edition Itanium
- Microsoft Windows Server 2003 Enterprise Edition
- Microsoft Windows Server 2003 Enterprise Edition Itanium
- Microsoft Windows Server 2003 Standard Edition
- Microsoft Windows Server 2003 Web Edition
- Microsoft Windows SharePoint Services 2.0
References