Short Name |
HTTP:INFO-LEAK:HTACCESS |
---|---|
Severity |
Minor |
Recommended |
No |
Category |
HTTP |
Keywords |
.htaccess Probe |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects probes for the .htaccess file, used by the Apache Web server for configuration directives. Attackers can be attempting to gain access to the Web server.
The default configuration of Cobalt Raq2 and Raq3 servers allows remote access to .htaccess files. This could lead to unauthorized retrieval of username and password information for restricted portions of a website hosted on the server.