µ¥¸ó(À¥¼¹ö,...)ÀÇ ¹öÀü Á¤º¸¸¦ ¼û±â´Â ¹æ¹ý (±Û ÁÁÀºÁøÈ£, È«¼®¹ü) | ÀÛ¼ºÀÏ : 2004/01/02 00:43 |
Á¶È¸¼ö : 14340 |
Á¦ ¸ñ : ¾ÆÆÄÄ¡¿¡¼ ServerSignature ¼³Á¤À¸·Î ¹öÀü ¼û±â±â ÀÛ¼ºÀÚ : ÁÁÀºÁøÈ£(truefeel, http://coffeenix.net/ ) ¾Æ·¡ È«¼®¹ü´ÔÀÌ ¾²½Å ±ÛÁß¿¡ Apache À¥¼¹ö ºÎºÐ¿¡¼ Çϳª¸¸ Ãß°¡ÇÏ°Ú´Ù. ServerSignature ¼³Á¤À¸·Î Error ÆäÀÌÁöµî¿¡¼ º¸°ÔµÇ´Â À¥¼¹ö Á¤º¸¸¦ ¼û±æ ¼ö ÀÖ´Ù. ¹°·Ð ErrorDocument ¼³Á¤À¸·Î ÆäÀÌÁö¸¦ ²Ù¹Ð ¼öµµ ÀÖÁö¸¸. [ ServerSignature on ¼³Á¤½Ã (±âº») ] [ ServerSignature off ¼³Á¤½Ã ] ------------------------------------------------------------------------------------ * ¾Æ·¡±Û Ãâó : sec-info ¸ÞÀϸµ ¸®½ºÆ® °¢ OSÀÇ ¹öÀü ¹× Á¤º¸¸¦ ¼û±â´Â ¹æ¹ý From: Sukbum Hong (antihong@tt.co.kr) Date: Thu Sep 13 2001 - 17:53:26 KST ------------------------------------------------------------------------------------ ¾È³çÇϽʴϱî? ¿À´Ã°ú³»ÀÏÀÇ È«¼®¹üÀÔ´Ï´Ù. ¿ø°ÝÁöÀÇ OS ¹× °¢Á¾ µ¥¸ó¿¡ ´ëÇÑ ¹öÀü Á¤º¸¸¦ ¼û±â°Å³ª À§Á¶ÇÏ´Â ¹æ¹ý¿¡ ´ëÇÑ ¼³¸íÀÔ´Ï´Ù. ÁÖ·Î ¼Ò½º¸¦ ¼öÁ¤Çϰųª config ¿¡¼ Áö¿øÀÌ µÇ´Â °æ¿ì config ÆÄÀÏ¿¡¼ ¼³Á¤ÇÏ´Â ¹æ¹ýµµ ÀÖ½À´Ï´Ù. Âü°íÇϽñ⠹ٶø´Ï´Ù. °¨»çÇÕ´Ï´Ù. ### Apache À¥¼¹ö (1) ¼Ò½º ¼öÁ¤ src/include/httpd.h : #define SERVER_BASEVERSION "Apache/[x.x.x.]" (2) Conf ¼³Á¤ httpd.conf ÆÄÀÏ¿¡¼ ServerTokens ¼³Á¤ ServerTokens Prod[uctOnly] --> Server: Apache ServerTokens Min[imal] --> Server: Apache/1.3.0 ServerTokens OS --> Server: Apache/1.3.0 (Unix) ServerTokens Full (or not specified) --> Server: Apache/1.3.0 (Unix) PHP/3.0 MyMod/1.2 ### Proftpd Conf ¼³Á¤ proftpd.conf ÆÄÀÏ¿¡¼ ServerIdent on "[x.x.x]" ### Sendmail (1) ¼Ò½º ¼öÁ¤ sendmail/version.c char Version[] = "[x.x.x]"; (2) Conf ¼³Á¤ /etc/sendmail.cf: # SMTP initial login message O SmtpGreetingMessage=$j [x.x.x] ### Bind Conf ¼³Á¤ /etc/named.conf ÆÄÀÏ¿¡¼ options { directory "/var/named"; version "x.x.x"; }; ### SSH1/OpenSSH ¼Ò½º ¼öÁ¤ version.h ÆÄÀÏ¿¡¼ #define SSH_VERSION "[x.x.x]" ### SSH2 ¼Ò½º ¼öÁ¤ apps/ssh/ssh2version.h ÆÄÀÏ¿¡¼ #define SSH2_VERSION "[x.x.x]" ### IMAP (imapd,ipop2d,ipop3d) ¼Ò½º ¼öÁ¤ src/imapd/imapd.c ÆÄÀÏ¿¡¼ char *version = "[x.x.x]"; src/ipopd/ipop2d.c ÆÄÀÏ¿¡¼ char *version = "[x.x.x]"; src/ipopd/ipop3d.c ÆÄÀÏ¿¡¼ char *version = "[x.x.x]"; ### O.S.-Guessing Linux (2.2.x) kernel patch: KOSF (Kernel Operation System Faker) http://linuxsecurity.com.br/tools/patch/linux/kosf.tar.gz ### O.S.-Guessing Linux (2.4.x) http://ippersonality.sourceforge.net/ CONFIG_IP_NF_PERS patch. ipt_PERS http://ippersonality.sourceforge.net/doc/ippersonality-en.html ### Microsoft Windows NT registry http://www.linuxsecurity.com.br/info/microsoft/obscurity.nt.txt * Âü°í »çÇ× À¥¼¹ö Çì´õ¿¡¼ PHP ¹öÀü Á¤º¸ ¼û±â±â (±Û ÁÁÀºÁøÈ£) http://coffeenix.net/board_view.php?bd_code=291 |
Ä¿ÇǴнº, ½Ã½ºÅÛ ¿£Áö´Ï¾îÀÇ ½°ÅÍ / URL : http://coffeenix.net/board_view.php?bd_code=163 |