Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Installation of compilers on production web servers is prohibited.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-2236 | WG080 IIS7 | SV-32632r1_rule | ECSC-1 | Medium |
| Description |
|---|
| The presence of a compiler on a production server facilitates the malicious user’s task of creating custom versions of programs and installing Trojan Horses or viruses. |
| STIG | Date |
|---|---|
| IIS 7.0 WEB SERVER STIG | 2013-04-11 |
Details
| Check Text ( C-33494r1_chk ) |
|---|
| Using Windows Explorer and/or add-remove programs, search the system for the existence of known compilers, such as, msc.exe, msvc.exe, Python.exe, javac.exe, Lcc-win32.exe, or equivalent. If a compiler is found on the production server, this is a finding. |
| Fix Text (F-26803r1_fix) |
|---|
| Remove any compiler programs found on the production web server. |