Apache Server 2.4 Unix

Apache Server 2.4 for Unix Benchmark - Custom

ID	Vuln ID	Title	Cat
WA000-WWA020 A24	V-13724	The TimeOut directive must be properly set.	Cat II
WA000-WWA022 A24	V-13725	The KeepAlive directive must be enabled	Cat II
WA000-WWA024 A24	V-13726	The KeepAliveTimeout directive must be enabled	Cat II
WA000-WWA026 A24	V-13727	The httpd.conf StartServers directive must be set properly.	Cat II
WA000-WWA028 A24	V-13728	The httpd.conf MinSpareServers directive must be set properly.	Cat II
WA000-WWA030 A24	V-13729	The httpd.conf MaxSpareServers directive must be set properly.	Cat III
WA000-WWA032 A24	V-13730	The httpd.conf MaxRequestWorkers directive must be set properly.	Cat II
WA000-WWA050 A24	V-13731	All interactive programs must be placed in a designated directory with appropriate permissions.	Cat II
WA000-WWA052 A24	V-13732	The "-FollowSymLinks" setting must be disabled.	Cat II
WA000-WWA054 A24	V-13733	Server side includes (SSIs) must run with execution capability disabled.	Cat I
WA000-WWA056 A24	V-13734	The MultiViews directive must be disabled.	Cat II
WA000-WWA058 A24	V-13735	Directory indexing must be disabled on directories not containing index files.	Cat II
WA000-WWA060 A24	V-13736	The HTTP request message body size must be limited.	Cat II
WA000-WWA062 A24	V-13737	The HTTP request header fields must be limited.	Cat II
WA000-WWA064 A24	V-13738	The HTTP request header field size must be limited.	Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.