ClearOS Bug Tracker


View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0000956ClearOSapp-web-server - Web Serverpublic2013-01-29 17:402013-02-26 20:35
Reporteruser2 
Assigned To 
PrioritynormalSeveritytweakReproducibilityN/A
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target Version6.4.0 Beta 2Fixed in Version 
Summary0000956: Disable version information for Apache and PHP
DescriptionFrom a forum post...

Here are a couple of changes that you can make that might prevent the scanner from doing version detection. You can hide the version information coming from Apache by changing the ServerTokens parameter in /etc/httpd/conf/httpd.conf:

ServerTokens Prod

Similarly for PHP, the expose_php parameter should be changed in /etc/php.ini:

expose_php = Off

Restart the web server after making the changes:

# service httpd restart

A web page request will no longer get presented with version information:
TagsNo tags attached.
Attached Files

- Relationships
related to 0000967closed Disable version information for Apache and PHP 
related to 0000826closedbchambers Restore configuration backup fails with invalid file type 

-  Notes
(0000669)
user2
2013-02-01 20:30

Source Code Changelog
---------------------------------------------------
- Changed ServerTokens parameter to prevent version leaked [fixed tracker 0000956]

File Changes
---------------------------------------------------
Details: http://code.clearfoundation.com/svn/revision.php?repname=ClearOS&rev=5572 [^]
U webconfig/apps/web_server/trunk/deploy/install

- Issue History
Date Modified Username Field Change
2013-01-29 17:40 user2 New Issue
2013-01-29 17:43 user2 Status new => confirmed
2013-02-01 20:29 user2 Issue cloned: 0000967
2013-02-01 20:29 user2 Relationship added related to 0000967
2013-02-01 20:30 user2 Checkin
2013-02-01 20:30 user2 Note Added: 0000669
2013-02-01 20:30 user2 Status confirmed => resolved
2013-02-01 20:30 user2 Resolution open => fixed
2013-02-05 17:25 user2 Relationship added related to 0000826
2013-02-26 20:35 user2 Status resolved => closed