 |
|
WEB_MISC /~ftp access
|
| |
Code:
p1289
Severity: Warning
Description:
This event is generated when an attempt is made to access the home directory of the ftp user via http.
Impact:
Medium - Possible unauthorized file access due a configuration error
Corrective:
Visit http://httpd.apache.org/docs for UserDir configuration options or
remove UserDir module if not needed.
Configure the ftp user to use a non-interactive nologin shell that does
not require a home directory.
|