ClearFoundation Tracker - ClearOS
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0000956ClearOSapp-web-server - Web Serverpublic2013-01-29 17:402013-02-26 20:35
Reporteruser2 
Assigned To 
PrioritynormalSeveritytweakReproducibilityN/A
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target Version6.4.0 Beta 2Fixed in Version 
Summary0000956: Disable version information for Apache and PHP
DescriptionFrom a forum post...

Here are a couple of changes that you can make that might prevent the scanner from doing version detection. You can hide the version information coming from Apache by changing the ServerTokens parameter in /etc/httpd/conf/httpd.conf:

ServerTokens Prod

Similarly for PHP, the expose_php parameter should be changed in /etc/php.ini:

expose_php = Off

Restart the web server after making the changes:

# service httpd restart

A web page request will no longer get presented with version information:
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
related to 0000967closed  Disable version information for Apache and PHP 
related to 0000826closed bchambers Restore configuration backup fails with invalid file type 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2013-01-29 17:40user2New Issue
2013-01-29 17:43user2Statusnew => confirmed
2013-02-01 20:29user2Issue cloned: 0000967
2013-02-01 20:29user2Relationship addedrelated to 0000967
2013-02-01 20:30user2Checkin
2013-02-01 20:30user2Note Added: 0000669
2013-02-01 20:30user2Statusconfirmed => resolved
2013-02-01 20:30user2Resolutionopen => fixed
2013-02-05 17:25user2Relationship addedrelated to 0000826
2013-02-26 20:35user2Statusresolved => closed

Notes
(0000669)
user2   
2013-02-01 20:30   
Source Code Changelog
---------------------------------------------------
- Changed ServerTokens parameter to prevent version leaked [fixed tracker 0000956]

File Changes
---------------------------------------------------
Details: http://code.clearfoundation.com/svn/revision.php?repname=ClearOS&rev=5572 [^]
U webconfig/apps/web_server/trunk/deploy/install