ASP.NET DEBUG Method Enabled Security Issue

About ASP.NET debugging is enabled on the host.

An attacker can send debug statements to the remote ASP.net scripts.

Check your website’s web.config and see check <compilation debug=”true”>

<!-- 
            Set compilation debug="true" to insert debugging 
            symbols into the compiled page. Because this 
            affects performance, set this value to true only 
            during development.
        -->
		<compilation debug="true">

Solution Disable DEBUG statements for ASP.NET. Refer to KB815157 for information on disabling debugging for ASP.NET applications.


		<compilation debug="false">

Enjoy

Leave a Reply

Your email address will not be published. Required fields are marked *