[cobalt-security] Security Apache 1.x

[Thomas Novin <thnov@xxxxxxxxxxx>]

> >Hello cobalt-security-list,
> >
> >New vulnerability discovered:
> >http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00189.html
> >
> >Any pach for Cobalt?

> hi
> as mentioned on this page: "unlikely for unix",
> so I guess waiting for a patch from sun should be possible.
>
> and (from httpd.apache.org):
> We were also notified today by ISS that they had published the same 
issue which has forced the early release of this advisory. Please note that 
the patch > provided by ISS does not correct this vulnerability.
>
> The Apache Software Foundation are currently working on new releases 
that fix this issue; please stay tuned here at http://httpd.apache.org/ for 
updated > > versions as they become available.

http://www.apache.org/dist/httpd/Announcement.html

The new versions are released, so, are we seeing a patch for Cobalt any 
time soon? All my other systems are upgraded now but the Cobalt boxes...



--
Thomas Novin · thnov@xxxxxxxxxxx · http://xyz.pp.se/~thnov/pgp_thalamus.asc
System Engineer · Thalamus Consulting AB · http://www.thalamus.se
V: +46 (0)431 445400 · F: +46 (0)431 445410 · GSM: +46 (0)704 280382