InformationThe Apache 'Options' directive allows for specific configuration of options, including execution of CGI, following symbolic links, server side includes, and content negotiation.
Refer to the Apache 2.2 documentation for details
The 'Options' directive at the web root or document root level should be restricted to the minimal options required. A setting of 'None' is highly recommended; however, at this level, content negotiation may be needed if multiple languages are supported. No other options should be enabled.
SolutionPerform the following to implement the recommended state:
1. Search the Apache configuration files ('httpd.conf' and any included configuration files) to find the document root '<Directory>' element.
2. Add or modify any existing 'Options' directive to have a value of 'None' or 'Multiviews', if multiviews are needed.
. . .
. . .