Win XP Pro, IIS 5.1, PCI Compliance

Posted by Mudman266 on Server Fault See other posts from Server Fault or by Mudman266
Published on 2011-10-26T15:16:12Z Indexed on 2011/11/23 17:53 UTC
Read the original article Hit count: 234

Filed under:

iis5

|

pci

I have a client that was scanned and determined not to be PCI Compliant. I looked and they had IIS setup to allow a program from central office to push/pull info from their server. Many of the reasons they failed appeared to have been fixed in SPs (they were on SP2) or security updates. I fully patched the server to (Windows XP Pro) SP3 with all optional updates. I had them scan again and again they failed with only one less vulnerability that I manually corrected (server was showing debugging/error messages). The main issue I'm having is that when I research the CVE code for each error, they say they are fixed in SP2 and up. I'm wondering if I need to remove IIS and resetup since I have patched to SP3. Any ideas?

© Server Fault or respective owner

Related posts about iis5

Where to download IIS5.1

as seen on Server Fault - Search for 'Server Fault'
Where I can download IIS 5.1? >>> More
Windows XP IIS5 performance across Network

as seen on Server Fault - Search for 'Server Fault'
Hi, Just wondering whether Windows XP with IIS5 running needs any extra configuration to be suitable as a web server...I'm not considering using this for anything other than a web server on a small network for testing development etc One of the reasons I'm concerned though is that we've deployed… >>> More
IIS5 to IIS6 upgrade, and the bin folder

as seen on Stack Overflow - Search for 'Stack Overflow'
We had a website running under IIS5 which used the bin directory as a housing for some asp pages as well as files for download and after upgrading to IIS6, we only get a 404 error when trying to access anything in that folder. We do not store any sensitive information in there, or code, and it would… >>> More
Where to download IIS5

as seen on Stack Overflow - Search for 'Stack Overflow'
Where I can download IIS 5.1? >>> More
Silverlight and IIS5 on XP

as seen on Stack Overflow - Search for 'Stack Overflow'
Besides modifying IIS to serve XAML extensions is there anything else that I need to do to allow IIS5 to server Silverlight pages? Do I actually need to run some Silverlight setup on the IIS5 web server or are all the setups intended for development machines and /or machines that end up consuming/browsing… >>> More

Related posts about pci

Ops Center 12c - Provisioning Solaris Using a Card-Based NIC

as seen on Oracle Blogs - Search for 'Oracle Blogs'
It's been a long time since last I added something here, but having some conversations this last week, I got inspired to update things. I've been spending a lot of time with Ops Center for managing and installing systems these days. So, I suspect a number of my upcoming posts will be in… >>> More
No sound after video card replaced (AMD Radeon HD 7770)

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
Issue: no sound System: Dual boot Windows 7 (sda) Ubuntu 12.04 (sdb) 2 harddrives Dell XPS 730 Video card: AMD Radeo HD 7770 Diamond Multimedia Sound card: Creative Labs SB X-Fi Additional info: My sound used to work. Then, my old video card (NVIDIA geforce 280) died. I bought and… >>> More
NEC uPD720200 USB 3.0 not working on Ubuntu 12.04

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I've recently installed Ubuntu 12.04 64-bit on a HP Envy 15 1104tx. Most stuff appears to be working fine with the exception of the two USB3 ports (USB2 port works fine). I've read a lot of articles but so far have not been able to find a solution. I've tried adding 'pci=nomsi' to '/etc/default/grub'… >>> More
wifi not recognized

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I had wifi and worked then some day ubuntu asked me to update some packeages and restarted the system and after that no wifi. this is my wireless_script output : ########## wireless info START ########## ##### release ##### Distributor ID: Ubuntu Description: Ubuntu 14.04 LTS Release: 14… >>> More
Internet doesn't work by default

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
After upgrading to Precise, I am required to run 'sudo dhclient eth0' in a terminal in order to get the internet to work. Everything worked perfectly fine on Oneiric, so It's really puzzling me. I'm thinking it could possibly be something with the kernel, but who knows. Output of dmesg: [ … >>> More