Re: [cobalt-security] Fw: blowchunks - protecting existing apache servers until upgrades arrive

[Brian Rahill <cobalt@xxxxxxxxxxxxxxxxxxxxxxx>]

At 01:40 PM 6/22/2002 -0700, you wrote:
> [RAQ4R]
> I've noticed that both
> /usr/sbin/httpd
> /usr/sbin/httpd.admsrv
> are compiled with DSO and mod_perl supprort - can anyone confirm that the
> below code attaches to apache as stated in the below post?  This sounds like
> a perfect bandaid until we here from sun on the officialy patch.
>
> Anyone with a development server and 2 minutes?

Well I just gave it a go on one of my boxes and it doesn't seem to have 
caused any problems....At least it's still serving webpages.
I used the perl version and added it directly to my httpd.conf
Of course I haven't tried to DOS myself so I'm not positive it actually works.

Brian

--
Brian M. Rahill
President
RainStorm, Inc.
http://www.rainstormconsulting.com
"Designing Strategies for Internet Success."
brian@xxxxxxxxxxxxxxxx
Phone: 207-866-3908
Fax: 207-866-0297