Security Issue : Apache info being displayed on non-existent pages

Issue :

When an user tries to access a non-existent page or when a new account is created and no index page is uploaded then the following information can be viewed :

Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.2.8 Server at domain.com Port 80

Fix :

Disable the Server Signature via WHM >> Main >> Service Configuration >> Apache Configuration >> ServerSignature

OR

Add the following lines in the httpd.conf file :

ServerSignature Off
ServerTokens Prod
FileETag None

Filed Under: Quick fixesTechnical

Tags:

About the Author: InstaCarma is a provider of Enterprise Class Solutions for the Hosting Industry

RSSComments (1)

Leave a Reply | Trackback URL

  1. [...] This post was Twitted by InstaCarma – Real-url.org [...]

Leave a Reply

Get Adobe Flash playerPlugin by wpburn.com wordpress themes
InstaCarma provides outsourced web hosting technical support, helpdesk management, datacenter automation, cloud service management. Sales - 1800 810 6547 - visit www.instacarma.com