Full Disclosure: Re: In ur server-status

[Alessandro Fiorenzi <a.fiorenzi () infogroup it>]

Well I find is more serious to find /server-info availabable on one of
thats,
you could rebuild some important information on the apache
configuration, modules, directives, etc..

Alessandro Fiorenzi


On Sat, 2007-07-21 at 22:53 -0500, Todd Troxell wrote:

> Noticing lots of admins tend to forget about /server-status, I typed at random:
>
> http://www.cnn.com/server-status
> http://www.webshots.com/server-status
> http://www.download.com/server-status
> http://slashdot.org/server-status
>
> I am sure there are ten billion others.  In some cases this is worse than
> someone grabbing your access log. 
------------------------------------------------------------------------------------
INFOGROUP S.P.A                                  http://www.infogroup.it
Gruppo Banca CR Firenze
http://www.carifirenze.it
------------------------------------------------------------------------------------

Dott. Fiorenzi Alessandro  
Security Project & Management

Consulente Tecnico Trib. Firenze - Sicurezza Informatica -
Albo consulenti ed esperti CCIAA Firenze
Socio CLUSIT, ALSI  
Member of IEEE Computer Society

Tel    : +390554365742                
CE     : +393356414477                 
@Email : a.fiorenzi () infogroup it 
@Email : Security.Management () infogroup it
PGP Key: http://www.infogroup.it/ds/fiorenzi.asc
------------------------------------------------------------------------------------

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/