20CN网络安全小组论坛 - 菜鸟乐园 - CGI漏洞中的/stats/有什么用呀？

论坛: 菜鸟乐园标题: CGI漏洞中的/stats/有什么用呀？

复制本贴地址

作者: zhangyanbo [zhangyanbo]

论坛用户

我什么到电视台的网络有这个漏洞，但不知道有什么用，喜欢大家可以帮我的忙，谢谢。

地主发表时间: 04-04-16 20:49

回复: zhangyanbo [zhangyanbo]

论坛用户

求各位了！

B1层发表时间: 04-04-18 09:25

回复: zhangyanbo [zhangyanbo]

论坛用户

求你们了.

B2层发表时间: 04-04-21 11:43

回复: BrideX [bridex]

论坛用户

我这里有关于Status的

Server Version: Apache/1.3.29 (Unix) PHP/4.3.3
Server Built: Nov 3 2003 09:56:40

--------------------------------------------------------------------------------
Current Time: Monday, 29-Dec-2003 02:47:16 EST
Restart Time: Monday, 29-Dec-2003 02:00:56 EST
Parent Server Generation: 697
Server uptime: 46 minutes 20 seconds
Total accesses: 2253 - Total Traffic: 61.7 MB
CPU Usage: u1.85938 s3.71875 cu17.6953 cs3.48438 - .963% CPU load
.81 requests/sec - 22.7 kB/second - 28.1 kB/request
8 requests currently being processed, 242 idle servers

然后是一大群IP列表.
...
...
...
Srv Child Server number - generation
PID OS process ID
Acc Number of accesses this connection / this child / this slot
M Mode of operation
CPU CPU usage, number of seconds
SS Seconds since beginning of most recent request
Req Milliseconds required to process most recent request
Conn Kilobytes transferred this connection
Child Megabytes transferred this child
Slot Total megabytes transferred this slot

还有站长提的安全建议.

回复: NetDemon [netdemon] ADMIN 回复收藏
httpd.conf

注释掉 LoadModule status_module libexec/apache/mod_status.so

或者下面的

#<Location /server-status>
# SetHandler server-status
# Order deny,allow
# Deny from all
# Allow from .your-domain.com
#</Location>

其实你配置好了只有你自己才可以看到，别人不可以的

是这个么?如果不是,我是找不到了...

B3层发表时间: 04-04-21 13:55

论坛: 菜鸟乐园