Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I run some scans with nikto, and it tells me that HTTP trace method is enabled. What is HTTP trace method ? And what can be insecure about it?

share|improve this question
up vote 3 down vote accepted

TRACE is a HTTP request method like GET and POST used for debugging. It echos back input to the user.

These websites outline insecurities: http://www.cgisecurity.com/questions/httptrace.shtml and http://publib.boulder.ibm.com/httpserv/ihsdiag/http_trace.html

share|improve this answer
1  
These websites outline insecurities. – mcandre Jun 23 '10 at 20:04
    
@mcandre Whaha! Thanks, it's corrected! ;) – BloodPhilia Jun 23 '10 at 20:05

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .