NT IIS ASP VBScript Runtime Error Viewable Source Vulnerability

NT IIS ASP VBScript Runtime Error Viewable Source Vulnerability

Solution:
Solutions:
1: Thoroughly debug all ASP code before publishing.

2: Set IIS to not serve default error messages to the browser.
In IIS 4.0, this is done by the following:
In Internet Service Manager open the properties of the website you wish to edit.
Select the 'Directory' or 'Home Directory' tab.
Under 'Applications' click 'Configuration'.
Select the 'App Debugging' tab.
Select 'send text error message to client' and enter desired text.

3: Use ACLs to restrict access to all files that should not be sent to the browser.

4: Rename .inc and other included files to .asp .