web server directory listings security issue

[Joseph Phillips]

The issue normally has to do with sites running server side scripting. If 
someone can find the directory where you keep configuration information or 
other information about PHP programs or other server side applications, they 
may be able to use that information to compromise your application and 
perhaps even you server.

Deven Phillips, CISSP
Information Security Specialist
Computer Sciences Corp.


On Saturday 27 October 2001 04:19 am, you wrote:
> Having directory listings turned on, so that web users can see the list of
> files and directories in any directory that doesn't have an index file, is
> said to be a security concern. Can somebody tell me in a sentence or two
> why? And perhaps how big a security concern it is? Thanks!
>
>
> ---
> You are currently subscribed to luau as: d-spair at hawaii.rr.com
> To unsubscribe send a blank email to $subst('Email.Unsub')