Re: Nessus hole report: MS/DOS device names

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 19 Sep 2007 17:05:13 +0200
"Gregor Schneider" <rc46fi@xxxxxxxxxxxxxx> wrote:

> Within Nessus, you have the options to choose the tests you want to
> run. It's a bit of work, however, configuring (choosing those tests
> dealing with *your* os / webserver / database etc.) and then saving
> them for future usage is worth while and avoids such garbage-messages.

Sounds like nonsense anyway.  A normal server on any platform can
safely access those names, and retrieve documents from somewhere
under its DocumentRoot, or whatever other source may be configured.

That report looks to me like trying to access /dev/ on *X.  Doesn't
mean http://httpd.apache.org/dev/ is anything to worry about.

-- 
Nick Kew

Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux