Details
Some COM components are not required for most applications and should be removed if possible. Most notably, consider disabling the File System Object component; however, this will also remove the Dictionary object. Be aware some programs may require components that are being disabled, so it is highly recommended this be tested completely before implementing on your production Web servers.
Solution
Unregister the File System Object using the following command: regsvr32 scrrun.dll /u.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.
References
- 800-53|CM-7b.
- CAT|II
- CSCv6|9.1
- Rule-ID|SV-38151r2_rule
- STIG-ID|WA000-WI100_IIS6
- Vuln-ID|V-13700
Comments
Please sign in to leave a comment.