If a PHP Shell can be uploaded. http://phpshell.sourceforge.net/ Then any thing www-data can do so can the shell user, As stated in my post about virtual hosts seeing each others document roots.
----- Original Message -----
From: "ASAI" <asai@xxxxxxxxxxxxxxxxxxxxx>
To: users@xxxxxxxxxxxxxxxx
Sent: Saturday, March 19, 2011 6:09:51 PM
Subject: [users@httpd] Directories Being Probed Even When Index Listing Denied
Greetings,
I am hosting a domain with no website which is a gateway for several
applications. Directory indexes are turned off, however I noticed in
the logs today that one the directories which has no reference to the
outside world was probed. Is it possible that one can get the directory
listing of a host even when index listing is turned off through some
other agency?
How do I guard against things like this?
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
