A production OHS Installation must prohibit the installation of a compiler.

From Oracle HTTP Server 12.1.3 Security Technical Implementation Guide

Associated with: CCI-000366

SV-79145r1_rule A production OHS Installation must prohibit the installation of a compiler.

Vulnerability discussion

The presence of a compiler on a production server facilitates the malicious user’s task of creating custom versions of programs and installing Trojan Horses or viruses. For example, the attacker’s code can be uploaded and compiled on the server under attack.

Check content

1. Ask the System Administrator if a compiler is installed on the system. 2. If it is, this is a finding.

Fix text

Ask the System Administrator to remove any compilers installed on the system.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.