Installation of compilers on production web server is prohibited.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-2236	WG080 IIS7	SV-32632r1_rule	ECSC-1	Medium

Description
The presence of a compiler on a production server facilitates the malicious user’s task of creating custom versions of programs and installing Trojan Horses or viruses.

STIG	Date
IIS 7.0 WEB SERVER STIG	2011-08-19

Details

Check Text ( C-33494r1_chk )
Using Windows Explorer, search the system for the existence of known compilers, such as, msc.exe, msvc.exe, Python.exe, javac.exe, Lcc-win32.exe, or equivalent. If a compiler is found on the production server, this is a finding.

Fix Text (F-26803r2_fix)
Remove any compiler programs found on the production web server.