Thanks,
Rick
Renaud Deraison wrote:
On Thu, Oct 02, 2003 at 09:44:46AM -0700, D. Rick Anderson wrote:
whoa ... half the message is gone! oh .. DUH! .. I put a period on a line with two CRs! LOL .. the mail server thought it was done! ... here it is again:
(your MTA is not very bright)
I'm trying to make our network 'nessus tight', but my Apache server keeps coming up with one last issue:
The following CGI directories are browsable:
<PERIOD GOES HERE>
I've even tried disabling CGI on the server completely, but it keeps coming up. What's the fix for this?
By any chance, is the front page of your web server the listing of a directory ? (like : "Index of /"). If so, then Nessus considers it as a directory hosting CGIs, because of the ?A=D (and such) options that allow you to re-sort the output, so technically this is not a false positive.
-- Renaud
