Lots of scripts out there for little script kiddies to run simply look at banners of different services to determine their worth in attempting to run an exploit against to gain access. By changing banners it helps to remove a good chunk of exploits that are out there. It also promotes laziness amongst system admin's ... :)
On Mon, 8 Mar 2004, James Agnew wrote: > Date: Mon, 8 Mar 2004 23:19:59 +0100 > From: James Agnew <[EMAIL PROTECTED]> > Reply-To: Tomcat Users List <[EMAIL PROTECTED]> > To: Tomcat Users List <[EMAIL PROTECTED]> > Subject: Re: Hiding "Apache-Coyote/1.1" banner in Tomcat 5 > > I just like to reduce as much as possible the amount of information that a > server gives out. Letting oppotunist crackers, who run a 1 minute nessus > scan, know the version and type of the webserver, should IMO be avoided if > possible. Sure, it won't put-off the determined cracker, but it might force > some to move onto easier prey. > > Anyway, back to the matter in hand - do you know how one might go about > this? > > Thanks, James --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
