Apache 2.2 configuration

smart_shell · 10-20-2010, 10:38 AM

hi, i try to fix bugs on my web server, but i can't fix it

Synopsis : The remote web server allows redirects to arbitrary domains. Description : The remote web server is configured to redirect users using a HTTP 302, 303 or 307 response. However, the server can redirect to a domain that includes components included in the original request. A remote attacker could exploit this by crafting a URL which appears to resolve to the remote server, but redirects to a malicious location

please help to configure.
thnx

anomie · 10-20-2010, 04:35 PM

Is this a contract gig you landed? Homework?

You may want to read up on:

http://httpd.apache.org/docs/2.2/mod/directives.html (see "Redirect" and possibly "Rewrite*")
http://www.modsecurity.org/documentation/