By default, in IBM HTTP Server V8.0 , is server side directives file retrieval possible?
e.g. <!--#include file="C:\boot.ini"-->
Asked
Active
Viewed 90 times
0
covener
- 17,402
- 2
- 31
- 45
bittersour
- 937
- 2
- 11
- 32
-
@BalusC I am using IBM HTTP Server V8.0 – bittersour Jun 10 '16 at 08:20
1 Answers
0
In the default configuration, mod_include is loaded but the "Includes" option is not enabled for any context. Also, #include file= cannot use absolute paths or ../.
Also, this seems like a "try it and see" kind of question.
covener
- 17,402
- 2
- 31
- 45
-
Thanks for the reply. It is not "try it and see" question. This is one of the high finding from penetration testing. I need solid justification to prove that this finding is false positive. Thanks. – bittersour Jun 13 '16 at 01:17
-
What is stronger proof, demonstration of the response or asking the internet what the response might be? – covener Jun 13 '16 at 03:41