Detections
Analytics
WA00515 A22 - Automatic directory indexing must be disabled.
Information
To identify the type of web servers and versions software installed it is common for attackers to scan for icons or special content specific to the server type and version. A simple request like http://example.com/icons/apache_pb2.png may tell the attacker that the server is Apache 2.2 as shown below. The many icons are used primary for auto indexing, which is recommended to be disabled.Solution
Edit the httpd.conf file and remove autoindex_module.See Also
https://iasecontent.disa.mil/stigs/zip/U_Apache_2-2_UNIX_V1R11_STIG.zip
Item Details
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7b., CAT|II, Rule-ID|SV-33219r1_rule, STIG-ID|WA00515_A22, Vuln-ID|V-26368
Plugin: Unix
Control ID: bca78f77f4c27836ff8c860e8ca7125e0a25f8edec16a14d4a50a7b8222af566