Nikto Output

DEBUG HTTP verb may show server debugging information. See http://msdn.microsoft.com/en-us/library/e8z01xdh%28VS.80%29.aspx for details.

Description

The ASP.NET application is running in debug mode which allows a remote user to glean information about an application by using the DEBUG verb in an HTTP request.
This can leak information including source code, hidden filenames, and detailed error
messages.

Solution

Set the following in the web.config

<compilation 
 debug="false"
/>

References

• HOW TO: Disable Debugging for ASP.NET Applications