[Zope] Banner Grabbing

Steve McMahon steve at dcn.org
Tue Sep 30 18:49:18 EDT 2003


Apache forwards it, e.g. from a query via Apache:

Server: Zope/(Zope 2.6.1 (source release, python 2.1, linux2), python 
2.1.3, freebsd4) ZServer/1.1b1

I don't believe in relying on security-through-obscurity, but that does 
strike me as a bit too informative.

Mitch Pirtle wrote:
> On Tue, 2003-09-30 at 17:46, D. Rick Anderson wrote:
> 
>>How do we modify the 'Server' string in Zope? My boss is on a security 
>>kick, and somebody got him stuck on the term 'banner grabbing'. I just 
>>want to put something in there that doesn't identify the server or version.
> 
> 
> Are you hosting zope behind apache?  You may need to do your trickery
> there...
> 
> -- mitchy




More information about the Zope mailing list