Environment:
- web and app servers are Windows Server 2003 Enterprise / IIS 6
- Web Server is behind a firewall - ports 80 and 443 are open to the world.
- Between the WebServer and the AppServer traffic goes through a firewall and only port 80 is open
- The webserver external website makes calls to WCF services on the app server. These WCF service calls are completely unauthenticated - but perform very critical data updates to a database server.
I assume (correct me if I'm wrong) that compromising the webserver would require an attack along port 443 or 80 from the outside world - thus it would require an IIS exploit to compromise the server.
Questions:
- How bad is this configuration when dealing with critical data?
- If the webserver is compromised, is there anything that can be done to mitigate its impact and for most scenarios prevent arbitrary invocation of the WCF services?
- Is there a list of the "typical" impacts of historic IIS vulnerabilities?