how to update IIS SP

Hi All,

Please let me know how to update IIS Service pack, I have update
windows 2003 SP 2 but still I'm getting error as below:

Synopsis : The remote web server is running Microsoft IIS.
Description : The Patch level
(Service Pack) of the remote IIS server appears to be lower than the
current IIS service pack
level. As each service pack typically contains many security patches,
the server may be at risk.
Note that this test makes assumptions of the remote patch level based
on static return values
(Content-Length) within a IIS Server's 404 error message. As such, the
test can not be totally
reliable and should be manually confirmed. Note also that, to
determine IIS6 patch levels, a
simple test is done based on strict RFC 2616 compliance. It appears as
if IIS6-SP1 will accept
CR as an end-of-line marker instead of both CR and LF. Solution:
Ensure that the server is
running the latest stable Service Pack. Risk Factor: None Plugin
output : The remote IIS
server *seems* to be Microsoft IIS 6.0 - SP1

Thanks in Advance

Re: how to update IIS SP

There's no specific IIS service pack. SP only applies to OS.
what scanner you using? what's the mitigation action beside asking to you
apply the lastest so called IIS SP ?


--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


wrote in message
news:1182169334.526685.17400@z28g2000prd.googlegroups.com...
> Hi All,
>
> Please let me know how to update IIS Service pack, I have update
> windows 2003 SP 2 but still I'm getting error as below:
>
> Synopsis : The remote web server is running Microsoft IIS.
> Description : The Patch level
> (Service Pack) of the remote IIS server appears to be lower than the
> current IIS service pack
> level. As each service pack typically contains many security patches,
> the server may be at risk.
> Note that this test makes assumptions of the remote patch level based
> on static return values
> (Content-Length) within a IIS Server's 404 error message. As such, the
> test can not be totally
> reliable and should be manually confirmed. Note also that, to
> determine IIS6 patch levels, a
> simple test is done based on strict RFC 2616 compliance. It appears as
> if IIS6-SP1 will accept
> CR as an end-of-line marker instead of both CR and LF. Solution:
> Ensure that the server is
> running the latest stable Service Pack. Risk Factor: None Plugin
> output : The remote IIS
> server *seems* to be Microsoft IIS 6.0 - SP1
>
> Thanks in Advance
>

Re: how to update IIS SP

On Jun 19, 12:48 am, "Bernard Cheah [MVP]"
wrote:
> There's no specificIISservice pack. SP only applies to OS.
> what scanner you using? what's the mitigation action beside asking to you
> apply the lastest so calledIISSP ?
>
> --
> Regards,
> Bernard Cheahhttp://www.iis.net/http://www.iis-resources.com/http:// msmvps.com/blogs/bernard/
>
> wrote in message
>
> news:1182169334.526685.17400@z28g2000prd.googlegroups.com...
>
>
>
> > Hi All,
>
> > Please let me know how to updateIISService pack, I have update
> > windows 2003 SP 2 but still I'm getting error as below:
>
> > Synopsis : The remote web server is running MicrosoftIIS.
> > Description : The Patch level
> > (Service Pack) of the remoteIISserver appears to be lower than the
> > currentIISservice pack
> > level. As each service pack typically contains many security patches,
> > the server may be at risk.
> > Note that this test makes assumptions of the remote patch level based
> > on static return values
> > (Content-Length) within aIISServer's 404 error message. As such, the
> > test can not be totally
> > reliable and should be manually confirmed. Note also that, to
> > determine IIS6 patch levels, a
> > simple test is done based on strict RFC 2616 compliance. It appears as
> > if IIS6-SP1 will accept
> > CR as anend-of-linemarkerinstead of both CR and LF. Solution:
> > Ensure that the server is
> > running the latest stable Service Pack. Risk Factor: None Plugin
> > output : The remoteIIS
> > server *seems* to be MicrosoftIIS6.0 - SP1
>
> > Thanks in Advance- Hide quoted text -
>
> - Show quoted text -

We are using Nessus and I installed SP2 for 2003 this past weekend.
Still get the same as the OP