/vulndb/Directory Listing Denied

This error is generated when there is no index file in the requested directory and the server or application is not configured to reveal the directory contents. This, however, indicates that the directory exists.

An attacker may rely on directory listing errors to brute force directory names and therefore enumerate the application file structure.

Solution

Instead of returning the standard “Directory Listing Denied” error page, present the user with a generic error message indicating that the request was not successful or that the resource was not found.

Caveats

Presenting a custom page instead of a standard error page is considered a SEO best practice.

References

http://en.wikipedia.org/wiki/Webserver_directory_index