Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. 7.15
  4. Install and Configure BlackBerry AtHoc
  5. IIS 8.5 Security Technology Implementation Guide
  6. Application STIG
  7. IISW-SI-000214: Website must have MIMEs that invoke OS shell programs disabled

IISW-SI-000214: Website must have MIMEs that invoke OS shell programs disabled

The IIS 8.5 website must have Multipurpose Internet Mail Extensions (MIMEs) that invoke OS shell programs disabled.
To check compliance with IISW-SI-000214, complete the following steps on each site hosted on the IIS 8.5 web server:
  1. Open the IIS 8.5 IIS Manager.
  2. Click the IIS 8.5 website.
  3. Under
    IIS
    , double-click the
    MIME Types
     icon.
  4. From the
    Group by
     list, select
    Content Type
    .
  5. Click
    Select Fields
    .
  6. Under
    Application
    , verify that the following MIME types for OS shell program extensions have been removed from the list of extensions:
    • .exe
    • .dll
    • .com
    • .bat
    • .csh
If any of these OS shell MIME types are configured, your application is not compliant.
If your application is not compliant, complete the following steps:
  1. Open the IIS 8.5 IIS Manager.
  2. Click the IIS 8.5 website.
  3. Under
    IIS
    , double-click the
    MIME Types
     icon.
  4. Select
    Content Type
     from the
    Group by:
     list.
  5. Under
    Application
    , remove the following MIME types for OS shell program extensions from the list of extensions:
    • .exe
    • .dll
    • .com
    • .bat
    • .csh
  6. In the
    Actions
     pane, click
    Apply
    .