Home page logo
/

bugtraq logo Bugtraq mailing list archives

httpd.conf in Suse 6.4
From: zab0ra aka t0maszek <zabora () SZERMIERZ UNI WROC PL>
Date: Thu, 21 Sep 2000 11:24:43 +0200

hy...

in SuSe 6.4 (maybe another) any user from any host can get info about
packages installed on SuSe systems.
httpd.conf file have entry "Alias /doc/  /usr/doc/" (and others)

in www browser you cat set http://hosts.any/doc/packages/ and you get list
of installed packages

Solusion:
in httpd.conf

<Directory /usr/doc/packages>
order deny,allow
allow from your.ip.or.domain
deny from all
</Directory>


zab0ra aka t0maszek
-------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]