Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 Jun 2002 16:25:29 -0400 (EDT)
From:      Jeff Gentry <freebsd@hexdump.org>
To:        "David G . Andersen" <danderse@cs.utah.edu>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Apache root exploitable?
Message-ID:  <20020620162448.V77014-100000@hellfire.hexdump.org>
In-Reply-To: <20020620134143.C14099@cs.utah.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
>   It's not _root_ exploitable unless you run Apache as root.
>   If you do that, you're asking for it anyway.

Nope :)  While I mind DoS exploits, having ppl finding their way into my
system is even more bothersome, especially if there is no workaround
available, but ...

>   Upgrade to 1.3.26 or 2.0.39.

Gotcha.  Thanks.

-J


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020620162448.V77014-100000>