Some application server's default error reporting often gives away information that is valuable for attackers.
Added by Ines D.
Step 1
This could include servers like Apache, Nginx, Tomcat, etc. Show more…
Show all steps
Your feedback will help us improve your experience
Muhammad Jan and 54 other AP CS educators are ready to help you.
Ask a new question
Labs
Want to see this concept in action?
Explore this concept interactively to see how it behaves as you change inputs.
Key Concepts
Recommended Videos
How the debugging process can be used to help develop more secure, robust applications.
Muhammad J.
Which of the following statements is true concerning the improper error handling? Attackers can use error messages to extract specific information from a system; b Attackers can use unexpected errors to knock an application off line; creating a denial-of-service attack AIl of the above statements are correct. None of the above statements is correct;
Paul G.
Text: Case Project 4-1: Using an Email address to Determine a Network's Operating System Alexander Rocco Corporation has multiple OS's running in its many offices. Before conducting a security test to determine the vulnerabilities you need to correct, you want to determine whether any OSs are running that you're not aware of. Christy Fitzgerald, the network administrator/security officer, is resistant to giving you information after he learns you're there to discover network security vulnerabilities. He sees you as a threat to his position. After several hours of interviews, you can ascertain only that Mike's personal email address is vetman2601 at gmail com, and an old RHEL server is running on one of the company's systems. - Write a memo to the IT manager, Bob Jones, about the potential issues with running an old RHEL 5.8 server, and mention the importance of patch hygiene. Make sure your memo explains how you gathered this information and offers constructive feedback. Your memo shouldn't point a finger at any company employees: it should discuss problems on a general level.
Supreeta N.
Recommended Textbooks
Computer Science and Information Technology
Introduction to Programming Using Python
Computer Science - An Overview
Transcript
Watch the video solution with this free unlock.
EMAIL
PASSWORD