天天看點

如何解決 Apache Tomcat 目錄周遊漏洞

APACHE 的httpd.conf檔案
      路徑: vi ./conf/httpd.conf
  Options Indexes MultiViews  ← 找到這一行,将“Indexes”删除
    ↓
  Options MultiViews   ← 變為此狀态(不在浏覽器上顯示樹狀目錄結構)
AllowOverride None
Order allow,deny
Allow from all
</Directory>

TOMCAT修改conf/web.xml檔案 
    <servlet>
        <servlet-name>default</servlet-name>
        <servlet-class>org.apache.catalina.servlets.DefaultServlet</servlet-class>
        <init-param>
            <param-name>debug</param-name>
            <param-value>0</param-value>
        </init-param>
        <init-param>
            <param-name>listings</param-name>
            <param-value>false</param-value> // 這裡改為false 重新開機就好了
        </init-param>
        <load-on-startup>1</load-on-startup>
    </servlet>