From owner-freebsd-security  Wed Jun 19  6:52:13 2002
Delivered-To: freebsd-security@freebsd.org
Received: from gw.nectar.cc (gw.nectar.cc [208.42.49.153])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3A98037B408; Wed, 19 Jun 2002 06:52:07 -0700 (PDT)
Received: from madman.nectar.cc (madman.nectar.cc [10.0.1.111])
	by gw.nectar.cc (Postfix) with ESMTP
	id B9B56D; Wed, 19 Jun 2002 08:52:06 -0500 (CDT)
Received: from madman.nectar.cc (localhost [IPv6:::1])
	by madman.nectar.cc (8.12.3/8.12.3) with ESMTP id g5JDq6JI019640;
	Wed, 19 Jun 2002 08:52:06 -0500 (CDT)
	(envelope-from nectar@madman.nectar.cc)
Received: (from nectar@localhost)
	by madman.nectar.cc (8.12.3/8.12.3/Submit) id g5JDpukV019639;
	Wed, 19 Jun 2002 08:51:56 -0500 (CDT)
Date: Wed, 19 Jun 2002 08:51:56 -0500
From: "Jacques A. Vidrine" <nectar@FreeBSD.org>
To: Maxim Sobolev <sobomax@FreeBSD.org>
Cc: security@FreeBSD.org,
	Alexandr Kovalenko <never@nevermind.kiev.ua>, demon@FreeBSD.org,
	lev@serebryakov.spb.ru
Subject: Re: [Fwd: Russian Apache is not vulnerable to recent DoS]
Message-ID: <20020619135156.GA19379@madman.nectar.cc>
References: <3D1079D3.2BCF833F@FreeBSD.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <3D1079D3.2BCF833F@FreeBSD.org>
User-Agent: Mutt/1.3.99i
X-Url: http://www.nectar.cc/
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Wed, Jun 19, 2002 at 03:32:19PM +0300, Maxim Sobolev wrote:
> Redirect to a proper place.

Thanks, Maxim!

> -------- Original Message --------
> Subject: Russian Apache is not vulnerable to recent DoS
> Date: Wed, 19 Jun 2002 15:01:11 +0300
> From: Alexandr Kovalenko <never@nevermind.kiev.ua>
> To: freebsd-ports@FreeBSD.org
> 
> Russian Apache is not vulnerable to recent apache vulnerability,
> because
> it does not use code, which causes it. Please, remove FORBIDDEN from
> russian/apach13 and russian/apache13-ssl.

Do you a pointer to an analysis that leads to this conclusion?

If the maintainers are convinced, then they can remove FORBIDDEN.
I'm cc:ing them so that they are in the loop.

Cheers,
-- 
Jacques A. Vidrine <n@nectar.cc>                 http://www.nectar.cc/
NTT/Verio SME          .     FreeBSD UNIX     .       Heimdal Kerberos
jvidrine@verio.net     .  nectar@FreeBSD.org  .          nectar@kth.se

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message