S-118: Apache httpd Vulnerabilities

9 More Discussions You Might Find Interesting

1. Linux

Apache httpd configuration - Issues with APR

Hi I have tried setting up of Apache http server - httpd-2.4.25. During configuration, I understand it needs APR to be setup. Hence I have downloaded APR & APR-Util. Performed, tar xvfC apr-1.5.2.tar /root/httpd-2.4.25/srclib/apr What is happening is there is another directory...

2. UNIX for Dummies Questions & Answers

Locate which httpd.conf is used by Apache

What is the command to see what httpd.conf file is apache using. Apache is started.

3. AIX

Apache httpd appear too many times on processes

Dear all experts, I have a environment with 2 web, 2 apps and 2 db servers. Recently after I have patch the AIX O/S from 5300-11-02 to 5300-12-02, we found that the number of httpd processes increase largely. From originally 4 fix httpd processes become more than 600 processes. And it already...

4. Red Hat

apache 2.2 httpd.conf

Hi, I was wondering if someone could help me out here. I am super-paranoid, so am trying to limit what PHP files can be executed on this server. I have a small list of files that I want to allow. The rest, deny: <Files ~ "\.(php|php3)$"> order allow,deny deny from all </Files> I...

5. Red Hat

apache 2.2 httpd.conf

Hi, I was wondering if someone could help me out here. I am super-paranoid, so am trying to limit what PHP files can be executed on this server. I have a small list of files that I want to allow. The rest, deny. So I have base rule that denies all php files server-wide: order allow,deny ...

6. Web Development

servername in apache httpd.conf

I'd like to know if servername in apache httpd.conf is the machine name or domain name. If it is domain name like example.com, should it be registered before in use?

7. UNIX for Advanced & Expert Users

Building Apache httpd 2.2.15

Hi, What options should I use with ./configure to include mod_dav into the build? I use --enable-dav and I didn't see mod_dav.so anywhere in the build directory. I need to load mod_dav.so as a module during httpd startup. Thanks.

8. Ubuntu

Apache 2 httpd.conf empty

Hi everybody, I have installed Apache 2 + Tomcat 5.5. on Ubuntu 7.04 and the default httpd.conf is empty (0 lines), however there is a file called apache2.conf that looks like a default httpd.conf. I didn't use Apache in ages, since 1.3.x release, but I remember that the httpd.conf by default...

9. UNIX for Dummies Questions & Answers

Apache httpd.conf <VirtualHost> issue

I have just configured httpd.conf on a new Redhat 9 install. Below are my additions to httpd.conf. Everything works fine except that when typing http://spetnik.d2g.com into my web browser, I am sent to the "Default catch all" site. Any clues? NameVirtualHost *:80 #Default catch all ...

LEARN ABOUT REDHAT

httpd

httpd(8)						      System Manager's Manual							  httpd(8)

NAME

       httpd - Apache hypertext transfer protocol server

SYNOPSIS

       httpd [ -d serverroot ] [ -f config ] [ -C directive ] [ -c directive ] [ -D parameter ]

       httpd [ -h ] [ -l ] [ -L ] [ -v ] [ -V ] [ -t ] [ -X ]

DESCRIPTION

       httpd  is  the Apache HyperText Transfer Protocol (HTTP) server program. It is designed to be run as a standalone daemon process. When used
       like this it will create a pool of child processes to handle requests. To stop it, send a TERM signal to the initial (parent) process.  The
       PID of this process is written to a file as given in the configuration file.

       This  manual  page only lists the command line arguments. For details of the directives necessary to configure httpd see the Apache manual,
       which is part of the Apache distribution or can be found at http://httpd.apache.org/. Paths in this manual may not reflect  those  compiled
       into httpd.

OPTIONS

       -d serverroot
		   Set	the initial value for the ServerRoot directive to serverroot. This can be overridden by the ServerRoot command in the con-
		   figuration file. The default is /etc/httpd.

       -f config   Execute the commands in the file config on startup. If config does not begin with a /, then it is taken to be a  path  relative
		   to the ServerRoot. The default is conf/httpd.conf.

       -C directive
		   Process the configuration directive before reading config files.

       -c directive
		   Process the configuration directive after reading config files.

       -D parameter
		   Sets  a  configuration  parameter which can be used with <IfDefine>...</IfDefine> sections in the configuration files to condi-
		   tionally skip or process commands.

       -h	   Output a short summary of available command line options.

       -l	   Output a list of modules compiled into the server.

       -L	   Output a list of directives together with expected arguments and places where the directive is valid.

       -S	   Show the settings as parsed from the config file (currently only shows the virtualhost settings).

       -t	   Run syntax tests for configuration files only. The program immediately exits after these syntax parsing with  either  a  return
		   code of 0 (Syntax OK) or return code not equal to 0 (Syntax Error).	If -D DUMP_VHOSTS is also set, details of the virtual host
		   configuration will be printed.

       -v	   Print the version of httpd , and then exit.

       -V	   Print the version and build parameters of httpd , and then exit.

       -X	   Run httpd in debug mode.  Only one worker will be started and the server will not detach from the console.

FILES

       /etc/httpd/conf/httpd.conf
       /etc/mime.types
       /etc/httpd/conf/magic
       /var/log/httpd/error_log
       /var/log/httpd/access_log
       /var/run/httpd.pid

								   February 1997							  httpd(8)

Security Advisories (RSS)