BugTraq
Root Directory Listing on RH default apache Oct 27 2003 12:38PM
tfm tfm org (1 replies)
Hello everybody

[root@localhost root]# cat /etc/redhat-release
Red Hat Linux release 9 (Shrike)

# Install apache from cd or the latest one rpm
[root@localhost root]# rpm -Uvh /tmp/httpd-2.0.40-21.5.i386.rpm

==============================================
From /etc/httpd/conf/httpd.conf
#
# Disable autoindex for the root directory, and present a
# default Welcome page if no other index page is present.
#
<LocationMatch "^/$>
Options -Indexes
ErrorDocument 403 /error/noindex.html
</LocationMatch>
==============================================

It's true if you made a request like

GET / HTTP/1.0

Not true if you type:

GET // HTTP/1.0

If you have a simple index.html like

<html><body></body></html>

you aren't able to see the directory listing.
Well... a little problem but out there there are
lot of people that install default RH apache and
create "secret" (not linked) directory... :)
Well that's all, bye

TfM

___________________________________
-(/tmp/think_about_this:#)-> perl -e 'print 154.998 - 154,"\n"'
0.99799999999999
-(/tmp/think_about_this:#)-> perl -e 'print 154.997 - 154,"\n"'
0.997000000000014

[ reply ]
Re: Root Directory Listing on RH default apache Oct 28 2003 08:40AM
Stephen Samuel (samuel bcgreen com) (1 replies)
Re: Root Directory Listing on RH default apache Nov 02 2003 08:36AM
M.Hirsch (M Hirsch gmx de)


 

Privacy Statement
Copyright 2010, SecurityFocus