Penetration Testing mailing list archives

http TRACE option

From: pentestr <pentestr () gmail com>
Date: Fri, 18 Jan 2008 02:10:30 +0530

Hi,

what is the issue if TRACE option is enabled in web servers ? Nessusresults always display it as warning.

any idea...

Thanks in advance.
Rgds.
P.T.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Current thread:

http TRACE option pentestr (Jan 18)
- Re: http TRACE option jeffrey rivero (Jan 22)
- Re: http TRACE option Tim (Jan 22)
- Re: http TRACE option Florencio Cano (Jan 22)
- Re: http TRACE option Campbell Murray (Jan 22)
- Re: http TRACE option Chris McNab (Jan 22)
- RE: http TRACE option Maxime Ducharme (Jan 22)
- Re: http TRACE option Gleb Paharenko (Jan 22)
- Re: http TRACE option Alexander Bondarenko (Jan 22)
- Re: http TRACE option José M. Palazón Romero (Jan 22)
- Re: http TRACE option rajat swarup (Jan 22)

(Thread continues...)