Re: [cobalt-security] Copied from securiteam.com: Apache '?' Configuration Bug (List content)

[Carrie Bartkowiak <ravencarrie@xxxxxxxx>]

Weird to be talking about it without having it actually posted:
"It appears that under some circumstances, Apache will serve a 
directory listing even if there is an index.html (or other valid 
"index document") in the directory. This is triggered by a request 
for: 
http://www.example.com/?M=A
Solution:
Turning off indexing in the httpd.conf file will keep Apache from 
doing this. There is no real reason not to turn off indexing as a 
global option if you have an index.html file in every directory."

Note: I tried this on one of my sites that doesn't have indexing 
turned off, and it didn't work. 
-- 
Carrie Bartkowiak, ravencarrie@xxxxxxxx on 07/16/2001