From owner-freebsd-security Wed Jun 26 7: 1:15 2002 Delivered-To: freebsd-security@freebsd.org Received: from mile.nevermind.kiev.ua (office.netstyle.com.ua [213.186.199.26]) by hub.freebsd.org (Postfix) with ESMTP id 2F04A37B406 for ; Wed, 26 Jun 2002 07:01:06 -0700 (PDT) Received: from mile.nevermind.kiev.ua (never@localhost [127.0.0.1]) by mile.nevermind.kiev.ua (8.12.3/8.12.3) with ESMTP id g5QE0cqL079221; Wed, 26 Jun 2002 17:00:55 +0300 (EEST) (envelope-from never@mile.nevermind.kiev.ua) Received: (from never@localhost) by mile.nevermind.kiev.ua (8.12.3/8.12.3/Submit) id g5QE0UuO079219; Wed, 26 Jun 2002 17:00:30 +0300 (EEST) Date: Wed, 26 Jun 2002 17:00:29 +0300 From: Alexandr Kovalenko To: Marius Strom Cc: Mike Tancsa , freebsd-security@FreeBSD.ORG Subject: Re: Apache FreeBSD exploit released Message-ID: <20020626140029.GB61360@nevermind.kiev.ua> References: <20020622225822.GA65796@totem.fix.no> <20020622125713.547c2546.kzaraska@student.uci.agh.edu.pl> <3177.66.171.47.179.1024786088.squirrel@webmail.allneo.com> <20020622225822.GA65796@totem.fix.no> <5.1.0.14.0.20020623163303.071f8890@192.168.0.12> <20020623213601.GC3015@marius.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="WIyZ46R2i8wDzkSu" Content-Disposition: inline In-Reply-To: <20020623213601.GC3015@marius.org> User-Agent: Mutt/1.3.99i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --WIyZ46R2i8wDzkSu Content-Type: text/plain; charset=koi8-r Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, Marius Strom! On Sun, Jun 23, 2002 at 04:36:01PM -0500, you wrote: > Snippet from my logs: >=20 > [Sat Jun 22 17:42:47 2002] [error] [client X.X.X.X] Transfer-Encoding: ch= unked - denied and logged Is it safe to deny this things? I mean, does anything real use this? >=20 > On Sun, 23 Jun 2002, Mike Tancsa wrote: > >=20 > > What does it looks like in the logs on a patched version of apache ? --=20 NEVE-RIPE Ukrainian FreeBSD User Group http://uafug.org.ua/ --WIyZ46R2i8wDzkSu Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQE9Gcj94jPu1egM76YRAjksAJ9OdNXWGBIyZP//6t6LNX5LBWcJlgCfdq6+ lhvJE5RoCzmz53mijlUED0Y= =LiAI -----END PGP SIGNATURE----- --WIyZ46R2i8wDzkSu-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message