Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

We have run Acunetix Website Audit on our production site (asp.net 3.0) from outside world using http protocol.

It gave following High priority alert

Proxy accepts CONNECT requests
Severity High
Type Configuration
Reported by module Scripting

Description:
The remote proxy server can be used to send CONNECT requests.
The proxy allows everyone to perform CONNECT HTTP request to arbitrary port
The proxy server is running on TCP port 80.

I checked my website , found no WCF / web service is hosted. What could be the cause and how to resolve this alert.

share|improve this question
Did they provide the actual request/response combination that triggered the alert? It may be a false positive due to bad detection logic. – Shane Madden Apr 19 '12 at 18:18
no , do you want me to send full copy – Imran Rizvi Apr 19 '12 at 18:22

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.