Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. BlackBerry AtHoc 7.9
  4. Installation and Configuration Guide
  5. IIS 8.5 Security Technology Implementation Guide
  6. Server STIG
  7. IISW-SV-000124: Web server must have MIMEs that invoke OS shell programs disabled

IISW-SV-000124: Web server must have MIMEs that invoke OS shell programs disabled

The IIS 8.5 web server must have Multipurpose Internet Mail Extensions (MIMEs) that invoke OS shell programs disabled.
To check compliance with IISW-SV-000124, complete the following steps:
  1. Open the IIS 8.5 IIS Manager.
  2. Click the IIS 8.5 web server name.
  3. Under 
    IIS
    , double-click the 
    MIME Types 
    icon.
  4. From the 
    Group by
     list, select 
    Content Type
    .
  5. Click 
    Select Fields
    .
  6. Under 
    Application
    , verify that the following MIME types for OS shell program extensions have been removed from the list of extensions:
    • .exe
    • .dll
    • .com
    • .bat
    • .csh
If any of these OS shell MIME types are configured, your server is not compliant.
If your server is not compliant, complete the following steps:
  1. Open the IIS 8.5 IIS Manager.
  2. Click the IIS 8.5 web server name.
  3. Under 
    IIS
    , double-click the 
    MIME Types
     icon.
  4.  Select 
    Content Type
     from the 
    Group by:
     list.
  5. Under 
    Application
    , remove the following MIME types for OS shell program extensions from the list of extensions:
    • .exe
    • .dll
    • .com
    • .bat
    • .csh
  6. In the Actions pane, click 
    Apply
    .