## Description

By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### microsoft - internet_information_server

Affected Versions:

- 4.0

## References

- http://marc.info/?l=bugtraq&m=91983486431506&w=2
- http://marc.info/?l=bugtraq&m=92000623021036&w=2
- http://marc.info/?l=bugtraq&m=91983486431506&w=2
- http://marc.info/?l=bugtraq&m=92000623021036&w=2

Neural Processor Active