| Search for the unnecessary CGI programs which may be found in the directories configured with ScriptAlias, Script or other Script* directives. Often, CGI directories are named cgi-bin. Also, CGI AddHandler or SetHandler directives may also be in use for specific handlers such as perl, python and PHP. |
To search the http.conf file for Options enter the following command:
grep "Options" /usr/local/apache2/conf/httpd.conf.
For every instance of “Options” in the httpd.conf file other than where CGI files are specifically located, the “ExecCGI” must be explicitly disabled (-ExecCGI).
If the value for Options is not returned with a “-ExecCGI” , this is a finding.