Running Tomcat 5.0 on Win 2003...
I set the following in web.xml:
debug
0
listings
false
1
404
/404.html
But when someone tried to list a directory, e.g., www.ourdomain.com/images,
al
We have our server.xml file set w/ the following entry:
Valve className="org.apache.catalina.valves.AccessLogValve"
directory="../logs" prefix="ws_access_log." suffix=".txt" pattern="combined"
However, there are still many log entries showing no referrers. Some are
from user spiders such as the fo
I set the following in web.xml:
debug
0
listings
false
1
404
/404.html
But when someone tried to list a diretory, e.g., www.ourdomain.com/images,
all of the images in the 404 page and
We ran a vulnerability assessment (results follow below) and here are 2
issues that popped up, and the results suggest changing directives from the
httpd.conf file, which of course we don't have. What Tomcat equivalent
options in the XML config file(s) are needed to be set to fix these?
"The Mac