Web Server Reverse Proxy Bug

23 Jun 2005 3:18 PM

Pankaj

Hi - i recently used the vulnerability assessment service for our web server
& the following was reported by the system "The remote Web server seems to
allow any anonymous user to use it as a reverse proxy. This may expose
internal
services to potential mapping and, henceforth, compromise."

I am not sure i understand this issue & i was wondering if someone can
explain to me or point me in the right direction.

How do i get rid of this bug? Please help.

Windows 2000 , IIS 5.0 .

26 Jun 2005 4:33 AM

Bernard Cheah [MVP]

No idea, what Vunerability assessment service is that. didn't it tell you
how to solve it and the concept behind the reporting item?

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/

Show quoteHide quote

"Pankaj" <Pan***@discussions.microsoft.com> wrote in message
news:5444C950-E3CE-4494-BAFB-3F08BCD223FB@microsoft.com...
> Hi - i recently used the vulnerability assessment service for our web
> server
> & the following was reported by the system "The remote Web server seems to
> allow any anonymous user to use it as a reverse proxy. This may expose
> internal
> services to potential mapping and, henceforth, compromise."
>
> I am not sure i understand this issue & i was wondering if someone can
> explain to me or point me in the right direction.
>
> How do i get rid of this bug? Please help.
>
> Windows 2000 , IIS 5.0 .
>
>