Solution for Microsoft .NET/IIS Tilde (~) Vulnerability Will Not Negatively Impact Enterprise Vault

book

Article ID: 100048883

calendar_today

Updated On:

Description

Error Message

N\A

Cause

Microsoft Windows will use a tilde (~) when truncating a long to a short file name.  There is a .NET vulnerability in IIS when referencing pages using the short filename that can be used by a hacker in a denial of service (DOS) attack against the website.

Resolution

The short file names used for files within the IIS folder (inetpub) can be stripped away to remove this vulnerability on the Enterprise Vault server without causing any negative impact to the Enterprise Vault processes.  For more details review here.

  1. Start a Command Prompt as Administrator
  2. Type the following command:  fsutil 8dot3name strip /s /v C:\inetpub
  3. Hit [Enter] to execute the command.

Issue/Introduction

Solution for Microsoft .NET/IIS Tilde (~) Vulnerability Will Not Negatively Impact Enterprise Vault
Powered by Wolken Software