Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. BlackBerry AtHoc 7.9
  4. Installation and Configuration Guide
  5. IIS 8.5 Security Technology Implementation Guide
  6. Application STIG
  7. IISW-SI-000214: Website must have MIMEs that invoke OS shell programs disabled

IISW-SI-000214: Website must have MIMEs that invoke OS shell programs disabled

The IIS 8.5 website must have Multipurpose Internet Mail Extensions (MIMEs) that invoke OS shell programs disabled.
To check compliance with IISW-SI-000214, complete the following steps on each site hosted on the IIS 8.5 web server:
  1. Open the IIS 8.5 IIS Manager.
  2. Click the IIS 8.5 website.
  3. Under 
    IIS
    , double-click the 
    MIME Types 
    icon.
  4. From the 
    Group by
     list, select 
    Content Type
    .
  5. Click 
    Select Fields
    .
  6. Under 
    Application
    , verify that the following MIME types for OS shell program extensions have been removed from the list of extensions:
    • .exe
    • .dll
    • .com
    • .bat
    • .csh
If any of these OS shell MIME types are configured, your application is not compliant.
If your application is not compliant, complete the following steps:
  1. Open the IIS 8.5 IIS Manager.
  2. Click the IIS 8.5 website.
  3. Under 
    IIS
    , double-click the 
    MIME Types
     icon.
  4. Select 
    Content Type
     from the 
    Group by:
     list.
  5. Under 
    Application
    , remove the following MIME types for OS shell program extensions from the list of extensions:
    • .exe
    • .dll
    • .com
    • .bat
    • .csh
  6. In the Actions pane, click 
    Apply
    .