 |
|
WEB_MISC .htgroup access
|
| |
Code:
p1523
Severity: Warning
Description:
Attempted .htgroup access via web
Impact:
Attempt to gain information on group access permissions on a webserver
Corrective:
Webservers should not be allowed to view or execute files and binaries outside of it's designated web root or cgi-bin. Disallowing viewing of this file via a URI is suggested. For Apache webservers add the following to httpd.conf and restart the server.
Order allow,deny
Deny from all
|