Multiple Vendor Unprivileged User Permissions Log File Modification Vulnerability

Solution:
To resolve this problem, Microsoft recommends that you make the following changes on the appropriate folder (such as W3svc, W3svc1, Msftpsvc1, and so forth):

1.Remove the IUSR_ ComputerName account.

2. Modify the permissions for the Everyone group to have only the appropriate Read permission: Click Read in the Type of Access box.



 

Privacy Statement
Copyright 2010, SecurityFocus