WebApp Sec: Re: Top Ten Web App Sec Problems

[bt () munky seifried org]

Deploying servers to support applications (be they front end web, mid 
tier, back end database, etc.) with default configurations and uneeded 
items such as example and test scripts, debugging information enabled 
(i.e. informational error messages). You need to secure the infrastructure 
as well as the web application, this can be a real pain when vendors 
refuse to support recent service pack levels for IIS/etc.

-Kurt