Handling new vulnerabilities like WebDav I am curious as to how people in large organizations are handling new vulnerabilities like the WebDAV recently released. Specifically, I'm trying to gauge how people are determining their exposure, or risk level. Upon learning of a new vulnerability are folks scanning their entire environment to look for the vulnerability? Or are folks going through their inventory to look for IIS web servers and having folks manually check them?
Just looking for input. Please reply directly to me and I will sum up and post.
Thanks,
Bob
This transmission may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you
Received on Thu Mar 20 11:52:04 2003
This archive was generated by hypermail 2.1.8
: Wed Aug 23 2006 - 14:01:18 EDT
|