From owner-freebsd-security@FreeBSD.ORG  Mon Sep 29 17:12:40 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7A4FB16A4B3
	for <freebsd-security@freebsd.org>;
	Mon, 29 Sep 2003 17:12:40 -0700 (PDT)
Received: from sixshooter.v6.thrupoint.net (sixshooter.v6.thrupoint.net
	[65.242.152.6])	by mx1.FreeBSD.org (Postfix) with ESMTP id 3F99143F3F
	for <freebsd-security@freebsd.org>;
	Mon, 29 Sep 2003 17:12:39 -0700 (PDT)
	(envelope-from jpb@sixshooter.v6.thrupoint.net)
Received: from sixshooter.v6.thrupoint.net (localhost.v6.thrupoint.net
	[127.0.0.1])
	by sixshooter.v6.thrupoint.net (Postfix) with ESMTP id 5DDAB4E36
	for <freebsd-security@freebsd.org>;
	Mon, 29 Sep 2003 20:12:38 -0400 (EDT)
Received: (from jpb@localhost)h8U0CbT8073336
	for freebsd-security@freebsd.org;
	Mon, 29 Sep 2003 20:12:37 -0400 (EDT)
Date: Mon, 29 Sep 2003 20:12:37 -0400
From: Jim Brown <jpb@sixshooter.v6.thrupoint.net>
To: freebsd-security@freebsd.org
Message-ID: <20030930001237.GA73281@sixshooter.v6.thrupoint.net>
Mail-Followup-To: freebsd-security@freebsd.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.1i
Subject: Apache 'attack' etc.
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Sep 2003 00:12:40 -0000

I had this happen yesterday on my laptop running  4.8-RELEASE.  I have
Apache and mod_perl running, but not PHP.  At the time I was doing Mason
development using both Konqueror and Linux Netscape.

In my case it was a script bug which I fixed and the problem did not
reoccur.  

My laptop is NATted behind a firewall and I  have Apache listening 
on 127.0.0.1 port 80.  Chances of it being a real network attack are 
very remote.

Best Regards,
jpb
===