From owner-freebsd-questions Tue Aug 13 11:38:52 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 22A2337B400 for ; Tue, 13 Aug 2002 11:38:51 -0700 (PDT) Received: from smtp.infracaninophile.co.uk (happy-idiot-talk.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1975843E6A for ; Tue, 13 Aug 2002 11:38:50 -0700 (PDT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk ([IPv6:::1]) by smtp.infracaninophile.co.uk (8.12.5/8.12.5) with ESMTP id g7DIclTZ013910; Tue, 13 Aug 2002 19:38:47 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost) by happy-idiot-talk.infracaninophile.co.uk (8.12.5/8.12.5/Submit) id g7DIcgpp013909; Tue, 13 Aug 2002 19:38:42 +0100 (BST) Date: Tue, 13 Aug 2002 19:38:42 +0100 From: Matthew Seaman To: "H. Wade Minter" Cc: Matthew Seaman , freebsd-questions@FreeBSD.ORG Subject: Re: Apache content-length issue Message-ID: <20020813183842.GB13561@happy-idiot-talk.infracaninophi> References: <20020812220341.GA10183@happy-idiot-talk.infracaninophi> <20020813102825.B33536-100000@bunning.skiltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20020813102825.B33536-100000@bunning.skiltech.com> User-Agent: Mutt/1.5.1i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Tue, Aug 13, 2002 at 10:29:37AM -0400, H. Wade Minter wrote: > Is this something that might have been configured at compile-time for > Apache via the ports? Unlikely. There aren't any obvious knobs to twiddle in the www/apache13 Makefile. I think you'ld remember all the hoops you had to jump through to modify something like that. > Maybe to stop the chunked encoding vulnerability? No --- the cure as given in ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A04.asc was always to upgrade to 1.3.26 or 2.0.39 Those who cannot upgrade should investigate the www/mod_blowchunks port. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way Tel: +44 1628 476614 Marlow Fax: +44 0870 0522645 Bucks., SL7 1TH UK To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message