The web server must use a vendor-supported version of the web server software.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-2246	WG190 IIS6	SV-38193r2_rule	ECSC-1	High

Description
The web server Software, IIS 6, is no longer supported by Microsoft for security updates and is not evaluated or updated for vulnerabilities, leaving it open to potential attack. Organizations must transition to a supported IIS release to ensure continued support.

STIG	Date
IIS6 Server	2015-06-01

Details

Check Text ( C-37643r2_chk )
Microsoft IIS 6 mainstream support ended 13 July 2010, and extended support ended 14 July 2015. If Microsoft IIS 6 is installed on a system, this is a finding.

Fix Text (F-32884r2_fix)
Upgrade Microsoft IIS to a supported version.