I have a Windows 2003 server SP4 running IIS and a PCI scan shows up with a
Cross site scripting vulnerability. The Standard M$ response was to install
MS02-018.mspx but this was from 2002 and must have been installed already
years ago because since the server is on SP4. Please advise if there is any
other way to fix this?
Thanks,
Gonzolean
I made a typo the server is Windows 2000 NOT windows 2003.
Thanks
"criechton" wrote:
> I have a Windows 2003 server SP4 running IIS and a PCI scan shows up with a
> Cross site scripting vulnerability. The Standard M$ response was to install
> MS02-018.mspx but this was from 2002 and must have been installed already
> years ago because since the server is on SP4. Please advise if there is any
> other way to fix this?
>
> Thanks,
> Gonzolean
On Oct 15, 8:34 am, criechton
wrote:
> I have a Windows 2003 server SP4 running IIS and a PCI scan shows up with a
> Cross site scripting vulnerability. The Standard M$ response was to install
> MS02-018.mspx but this was from 2002 and must have been installed already
> years ago because since the server is on SP4. Please advise if there is any
> other way to fix this?
>
> Thanks,
> Gonzolean
There are Windows Server 2000 security fixes post SP4. You will need
to finish patching the Windows Server 2000 before running any security
analysis against it.
//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//