Check Point Advisories

Security Best Practice: Familiarize Yourself with the Directory Listing Protection

Check Point Reference:	SBP-2008-24
Date Published:	15 Aug 2008
Severity:	High
Last Updated:	Sunday 21 March, 2010
Source:	IPS Research Center
Protection Provided by:
Who is Vulnerable?	Web Servers
Vulnerability Description	One of the first steps an attacker may take before attacking a web site is to gather information about the site. The goal of the hacker is to get the web server to reveal information that hacker can use to tailor an attack.
Vulnerability Details	If file access permissions on a web server are not properly defined, it could become possible to view a directory listing of the server. This can reveal confidential information which could be exploited by malicious users.