[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-security] Proftpd Security Update 2.0.1 - New

The header that came back included the following:
Server: Apache/1.3.3 Cobalt (Unix)  (Red Hat/Linux)
What I had expected was:
Server: Apache
What am I doing wrong?


Nothing, the Apache directives:

ServerTokens ProductOnly

and

ServerTokens Minimal
will only return "Apache" on Apache versions 1.3.14 and later. Earlier versions of Apache will return what you're seeing - but will still strip out all the other stuff regarding the build versions of SSL, PHP, etc.