CIS_Apache_HTTP_Server_Benchmark_v300

SecurityConfigurationBenchmarkForVersion3.0.0May18th,2010ApacheHTTPServer2.2Copyright2001-2010,[e-mail]2|PageBackground.CISprovidesbenchmarks,scoringtools,software,data,information,suggestions,ideas,andotherservicesandmaterialsfromtheCISwebsiteorelsewhere(“Products”)asapublicservicetoInternetusersworldwide.RecommendationscontainedintheProducts(“Recommendations”)resultfromaconsensus-buildingprocessthatinvolvesmanysecurityexpertsandaregenerallygenericinnature.TheRecommendationsareintendedtoprovidehelpfulinformationtoorganizationsattemptingtoevaluateorimprovethesecurityoftheirnetworks,systemsanddevices.ProperuseoftheRecommendationsrequirescarefulanalysisandadaptationtospecificuserrequirements.TheRecommendationsarenotinanywayintendedtobea“quickfix”foranyone’sinformationsecurityneeds.Norepresentations,warrantiesandcovenants.CISmakesnorepresentations,warrantiesorcovenantswhatsoeverasto(i)thepositiveornegativeeffectoftheProductsortheRecommendationsontheoperationorthesecurityofanyparticularnetwork,computersystem,networkdevice,software,hardware,oranycomponentofanyoftheforegoingor(ii)theaccuracy,reliability,timelinessorcompletenessofanyProductorRecommendation.CISisprovidingtheProductsandtheRecommendations“asis”and“asavailable”withoutrepresentations,warrantiesorcovenantsofanykind.Useragreements.ByusingtheProductsand/ortheRecommendations,Iand/ormyorganization(“we”)agreeandacknowledgethat:Nonetwork,system,device,hardware,softwareorcomponentcanbemadefullysecure;WeareusingtheProductsandtheRecommendationssolelyatourownrisk;WearenotcompensatingCIStoassumeanyliabilitiesassociatedwithouruseoftheProductsortheRecommendations,evenrisksthatresultfromCIS’snegligenceorfailuretoperform;WehavethesoleresponsibilitytoevaluatetherisksandbenefitsoftheProductsandRecommendationstousandtoadapttheProductsandtheRecommendationstoourparticularcircumstancesandrequirements;NeitherCIS,noranyCISParty(definedbelow)hasanyresponsibilitytomakeanycorrections,updates,upgradesorbugfixesortonotifyusifitchoosesatitsoleoptiontodoso;andNeitherCISnoranyCISPartyhasorwillhaveanyliabilitytouswhatsoever(whetherbasedincontract,tort,strictliabilityorotherwise)foranydirect,indirect,incidental,consequential,orspecialdamages(includingwithoutlimitationlossofprofits,lossofsales,lossofordamagetoreputation,lossofcustomers,lossofsoftware,data,informationoremails,lossofprivacy,lossofuseofanycomputerorotherequipment,businessinterruption,wastedmanagementorotherstaffresourcesorclaimsofanykindagainstusfromthirdparties)arisingoutoforinanywayconnectedwithouruseoforourinabilitytouseanyoftheProductsorRecommendations(evenifCIShasbeenadvisedofthepossibilityofsuchdamages),includingwithoutlimitationanyliabilityassociatedwithinfringementofintellectualproperty,defects,bugs,errors,omissions,viruses,worms,backdoors,Trojanhorsesorotherharmfulitems.Grantoflimitedrights.CISherebygrantseachuserthefollowingrights,butonlysolongastheusercomplieswithallofthetermsoftheseAgreedTermsofUse:ExcepttotheextentthatwemayhavereceivedadditionalauthorizationpursuanttoawrittenagreementwithCIS,eachusermaydownload,installanduseeachoftheProductsonasinglecomputer;EachusermayprintoneormorecopiesofanyProductoranycomponentofaProductthatisina.txt,.pdf,.doc,.mcw,or.rtfformat,providedthatallsuchcopiesareprintedinfullandarekeptintact,includingwithoutlimitationthetextofthisAgreedTermsofUseinitsentirety.3|PageRetentionofintellectualpropertyrights;limitationsondistribution.TheProductsareprotectedbycopyrightandotherintellectualpropertylawsandbyinternationaltreaties.WeacknowledgeandagreethatwearenotacquiringtitletoanyintellectualpropertyrightsintheProductsandthatfulltitleandallownershiprightstotheProductswillremaintheexclusivepropertyofCISorCISParties.CISreservesallrightsnotexpresslygrantedtousersintheprecedingsectionentitled“Grantoflimitedrights.”Subjecttotheparagraphentitled“SpecialRules”(whichincludesawaiver,grantedtosomeclassesofCISMembers,ofcertainlimitationsinthisparagraph),andexceptaswemayhaveotherwiseagreedinawrittenagreementwithCIS,weagreethatwewillnot(i)decompile,disassemble,reverseengineer,orotherwiseattempttoderivethesourcecodeforanysoftwareProductthatisnotalreadyintheformofsourcecode;(ii)distribute,redistribute,encumber,sell,rent,lease,lend,sublicense,orotherwisetransferorexploitrightstoanyProductoranycomponentofaProduct;(iii)postanyProductoranycomponentofaProductonanywebsite,bulletinboard,ftpserver,newsgroup,orothersimilarmechanismordevice,withoutregardtowhethersuchmechanismordeviceisinternalorexternal,(iv)removeoraltertrademark,logo,copyrightorotherproprietarynotices,legends,symbolsorlabelsinanyProductoranycomponentofaProduct;(v)removetheseAgreedTermsofUsefrom,oraltertheseAgreedTermsofUseastheyappearin,anyProductoranycomponentofaProduct;(vi)useanyProductoranycomponentofaProductwithanyderivativeworksbaseddirectlyonaProductoranycomponentofaProduct;(vii)useanyProductoranycomponentofaProductwithotherproductsorapplicationsthataredirectlyandspecificallyde