WA000-WWA020 W22 – The Timeout directive must be properly set.
Details These Timeout requirements are set to mitigate the effects of several types of denial of service attacks. Although there...
- Home
- Security Hardening
- DISA STIG Apache Server 2.2 Windows V1R13
DISA STIG Apache Server 2.2 Windows V1R13
WA000-WWA022 W22 – The KeepAlive directive must be enabled.
Details The KeepAlive extension to HTTP/1.0 and the persistent connection feature of HTTP/1.1 provide long lived HTTP sessions which allow...WA000-WWA024 W22 – The KeepAliveTimeout directive must be defined.
Details The number of seconds Apache will wait for a subsequent request before closing the connection. Once a request has...WA000-WWA050 W22 – All interactive programs must be placed in a designated directory with appropriate permissions. – ‘AddHandler’
Details CGI scripts are one of the most exploited vulnerabilities on web servers. CGI script execution in Apache can be...WA000-WWA050 W22 – All interactive programs must be placed in a designated directory with appropriate permissions. – ‘-ExecCGI’
Details CGI scripts are one of the most exploited vulnerabilities on web servers. CGI script execution in Apache can be...WA000-WWA050 W22 – All interactive programs must be placed in a designated directory with appropriate permissions. – ‘SetHandler’
Details CGI scripts are one of the most exploited vulnerabilities on web servers. CGI script execution in Apache can be...WA000-WWA052 W22 – The FollowSymLinks setting must be disabled.
Details The Options directive configures the web server features that are available in particular directories. The FollowSymLinks option controls the...WA000-WWA054 W22 – Server side includes (SSIs) must run with execution capability disabled.
Details The Options directive configures the web server features that are available in particular directories. The IncludesNOEXEC feature controls the...WA000-WWA056 W22 – The MultiViews directive must be disabled.
Details Apache HTTPD supports content negotiation as described in the HTTP/1.1 specification. It can choose the best representation of a...WA000-WWA058 W22 – Directory indexing must be disabled on directories not containing index files.
Details Directory options directives are directives that can be applied to further restrict access to file and directories. If a...