HTTP_/etc/motd access

 

Code: p661

Severity: Warning

 

Description: This event is generated when an attempt is made to access the message of the day (motd) via the web

Impact: Attempt to gain information about the system on a webserver

Corrective: Webservers should not be allowed to view or execute files and binaries outside of it's designated web root or cgi-bin. This file may also be requested on a command line should the attacker gain access to the machine. Making the file read only by the superuser on the system will disallow viewing of the file by other users.