Hi all,
After a security scan, recommendations appeared on the master server to disable the “HTTP OPTIONS Method”.
Veritas document 100060605 recommends doing this by setting: C:\Program Files\Apache Software Foundation\Apache24\Conf\hpptd.conf…
But, in my case, C:\Program Files\Apache Software Foundation\ is missing.
How can I disable the “HTTP OPTIONS Method” in this case?
Andrii
Hi Andrii,
The document you mentioned - How to disable HTTP OPTIONS method in Apache HTTP Server (veritas.com) is for a different product (DLO - Desktop Laptop Option), not for NetBackup unfortunately.
I've had a bit of a search and cannot find anything regarding this for NetBackup, so your best bet would to be to log a support call with Veritas Support.
Hope this helps,
Steve
If you are referring to these CVE's particular vulnerability is found in CVE-2024-23672 and CVE-2024-24549, then look for the specific EEB for the NetBackup version you are on:
ET 4158486 NetBackup 10.4
ET 4158024 NetBackup 10.3.0.1
ET 4157810 NetBackup 10.2.0.1
ET 4157630 NetBackup 10.1.1.
ET 4157838 NetBackup 10.0.0.1
If it is not related to the above vulnerabilities, then just ignore this reply.
David
