Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. 7.19
  4. Install and Configure BlackBerry AtHoc
  5. IIS 10.0 Security Technology Implementation Guide
  6. Application STIG
  7. IIST-SI-000214: Disable MIMEs that invoke OS shell programs

IIST-SI-000214: Disable MIMEs that invoke OS shell programs

The IIS 10.0 website must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled.
To check compliance with IIST-SI-000214, complete the following steps for each site hosted on the IIS 10.0 web server:
  1. Open the IIS 10.0 Manager.
  2. Click the website name.
  3. Under
    IIS
    , double-click the
    MIME Types
     icon.
  4. From the
    Group by:
     drop-down list, select
    Content Type
    .
  5. From the list of extensions under
    Application
    , verify that MIME types for OS shell program extensions have been removed, to include at a minimum, the following extensions:
    • .exe
    • .dll
    • .com
    • .bat
    • .csh
If any OS shell MIME types are configured, your application is not compliant.
If your application is not compliant, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 site.
  3. Under
    IIS
    , double-click the
    MIME Types
     icon.
  4. From the
    Group by:
     drop-down list, select
    Content Type
    .
  5. From the list of extensions under
    Application
    , remove MIME types for OS shell program extensions to include, at a minimum, the following extensions:
    • .exe
    • .dll
    • .com
    • .bat
    • .csh
  6. In the
    Actions
     pane, click
    Apply
    .