 |
|
HTTP_/etc/motd access
|
| |
Code:
p661
Severity: Warning
Description: This event is generated when an attempt is made to access the message of the day (motd) via the web
Impact:
Attempt to gain information about the system on a webserver
Corrective: Webservers should not be allowed to view or execute files and binaries outside of it's designated web root or cgi-bin. This file may also be requested on a command line should the attacker gain access to the machine. Making the file read only by the superuser on the system will disallow viewing of the file by other users.
|