<qbern...@hotmail.com.discuss> wrote:
> There's no specificIISservice pack. SP only applies to OS.
> what scanner you using? what's the mitigation action beside asking to you
> apply the lastest so calledIISSP ?
>
> --
> Regards,
> Bernard Cheah
http://www.iis.net/http://
www.iis-resources.com/http://msmvps.com/blogs/bernard/
>
> <chiragbudhbha...@gmail.com> wrote in message
>
> news:1182169334.526685.17400@z28g2000prd.googlegroups.com...
>
>
>
> > Hi All,
>
> > Please let me know how to updateIISService pack, I have update
> > windows 2003 SP 2 but still I'm getting error as below:
>
> > Synopsis : The remote web server is running MicrosoftIIS.
> > Description : The Patch level
> > (Service Pack) of the remoteIISserver appears to be lower than the
> > currentIISservice pack
> > level. As each service pack typically contains many security patches,
> > the server may be at risk.
> > Note that this test makes assumptions of the remote patch level based
> > on static return values
> > (Content-Length) within aIISServer's 404 error message. As such, the
> > test can not be totally
> > reliable and should be manually confirmed. Note also that, to
> > determine IIS6 patch levels, a
> > simple test is done based on strict RFC 2616 compliance. It appears as
> > if IIS6-SP1 will accept
> > CR as anend-of-linemarkerinstead of both CR and LF. Solution:
> > Ensure that the server is
> > running the latest stable Service Pack. Risk Factor: None Plugin
> > output : The remoteIIS
> > server *seems* to be MicrosoftIIS6.0 - SP1
>
> > Thanks in Advance- Hide quoted text -
>
> - Show quoted text -
We are using Nessus and I installed SP2 for 2003 this past weekend.