Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Jun 2002 18:13:03 +0300
From:      ANdrei <andrei@abc.ro>
To:        security@FreeBSD.ORG
Subject:   Apache issues
Message-ID:  <3D0F4DFF.4ABEE1FB@abc.ro>

next in thread | raw e-mail | index | archive | help
have a few questions:

1) anyone heard anything about a worm/exploit for FreeBSD primarly, and
other systems, taking advantage of the new Apache bug?

2) is FreeBSD considered to be a possible target? as far as i
understood, it shouldn't be vulnerable... and if, does the bug exist in
Apache2 too?

3) anyone knows if the ports have the new fixed version? as far as i
understood, apache didn't release a fix till now... maybe we should have
at least the port "closed" till the fix is out... keep in mind that lots
of people do NOT read security lists (i know plenty of them), but they
upgrade packages on a regular basis... they could install the "new"
apache today, and then not worry like 2 months, though they did the
update just one day before the patch was released...
Of course, if the port was already frozen, i apologise for this last
comment... haven't checked it :)


tks,
ANdrei

-- 
----------------------------------[ http://www.goanga.com ]--
                                             
     Never take life seriously.             _     _
   Nobody gets out alive anyway.          o' \.=./ `o   
                                             (o o)
-----------------------------------------ooO--(_)--Ooo-------

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3D0F4DFF.4ABEE1FB>