[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] Apache worm that uses the chunk vulnerability - in the wild
- Subject: Re: [cobalt-security] Apache worm that uses the chunk vulnerability - in the wild
- From: Mailing Lists <listonly@xxxxxxxxxxxxxxxxxxxx>
- Date: Sat, 29 Jun 2002 08:02:57 -0500
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
on 6-29-02 5:09 AM, Gerald Waugh stated:
>>> The Apache version remains unchanged after you install that patch. So on
>>> a RaQ3 you'll still have Apache-1.3.6, on an RaQ4, XTR and RaQ550 you'll
>>> still have Apache-1.3.20.
>>
>> Actually, the RaQ3 patch is _supposed_ to upgrade Apache to 1.3.20... I
>> haven't looked to see if that actually made it into the patch or not
>> though.
>
> httpd -v
> Server version: Apache/1.3.6 (Unix)
> Server built: Jun 24 2002 13:43:27
Pretty much says it all about what Sun's feelings are towards Raq3 users.
Keep us at the same version and do our patch last it seemed. This will be my
last purchase of a cobalt product. My boxes are a year old this month.
Dave