Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. 7.19
  4. Install and Configure BlackBerry AtHoc
  5. IIS 10.0 Security Technology Implementation Guide
  6. Server STIG
  7. IIST-SV-000124: Disable MIMEs that invoke OS shell programs

IIST-SV-000124: Disable MIMEs that invoke OS shell programs

The IIS 10.0 web server must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled.
To check compliance with IIST-SV-000124, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 web server name.
  3. Under
    IIS
    , double-click the
    MIME Types
     icon.
  4. From the
    Group by:
     drop-down list, select
    Content Type
    .
  5. Under
    Application
    , verify that the list of MIME types for OS shell program extensions that have been removed includes, at a minimum, the following extensions:
    • .exe
    • .dll
    • .com
    • .bat
    • .csh
If any OS shell MIME types are configured, your server is not compliant.
If your server is not compliant, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 web server name.
  3. Under
    IIS
    , double-click the
    MIME Types
     icon.
  4. From the
    Group by:
     drop-down list, select
    Content Type
    .
  5. From the list of extensions under "Application", remove MIME types for OS shell program extensions, to include at a minimum, the following extensions:
    • .exe
    • .dll
    • .com
    • .bat
    • .csh
  6. In the
    Actions
     pane, click
    Apply
    .