Bugtraq mailing list archives

Re: Fw: easy remote detection of a running tripwire for webpages syst em


From: Matthew Wakeling <mnw21 () bigfoot com>
Date: Mon, 3 Sep 2001 09:15:24 +0100 (BST)


On Fri, 31 Aug 2001, Juan Vera wrote:

# echo "ServerTokens Min" >> /whatever/httpd.conf
# cp `which httpd` .
# ed httpd
507904
,s/Apache\/1.2.34/YOUWONTKNOW!!/g
w
507904
q
# ./httpd

Except that this gives away the number of characters in the original
version string.

Not too strong a hint, but there you go.

Matthew

-- 
Riker: Our memory pathways have become accustomed to your sensory input.
Data:  I understand - I'm fond of you too, Commander. And you too Counsellor



Current thread: