-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dave,
Dave Girardin wrote:
| Thanks so much Mark. As you suspected it was disabled so I suspect the
| security scan is in error. I'll check the web page to be sure though.
The scan probably just determines the version of TC running and then
spits ou
- Original Message -
From: "Dave Girardin" <[EMAIL PROTECTED]>
To:
Sent: Friday, June 13, 2008 11:38 PM
Subject: disable directory indexing in tomcat?
Group,
I'm a Unix admin working on a Solaris 8 server running Tomcat 6.0.16. No
other apps run on the serve
Thanks so much Mark. As you suspected it was disabled so I suspect the
security scan is in error. I'll check the web page to be sure though.
David
On 6/13/08, Mark Thomas <[EMAIL PROTECTED]> wrote:
>
>
> Dave Girardin wrote:
>
>> Does this request make sense? I ask because I can't find any infor
Dave Girardin wrote:
Does this request make sense? I ask because I can't find any information on
directory indexing for Tomcat, although disabling it in Apache is easy
enough.
The request makes sense if directory listings are enabled, but they are
disabled by default.
You need to look for t
Group,
I'm a Unix admin working on a Solaris 8 server running Tomcat 6.0.16. No
other apps run on the server, for example, there is no Apache httpd running.
I have been tasked with disabling directory indexing based on a security
scan that provided this infomation:
Vulnerability Identified: Dir
