[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Apache Exploit Released - where is an update for Woody?



On Thu, Jun 20, 2002 at 01:58:23PM -0500, Gary Turner wrote:
| On Thu, 20 Jun 2002 12:04:40 -0500, Derrick 'dman' Hudson wrote:
| 
| >On Thu, Jun 20, 2002 at 01:29:04PM +1000, John wrote:
| <snip>
| >Nonetheless, the DSA says it affects 64-bit architectures.  It sounds
| >like if you're not using a 64-bit system (eg SPARC or ia64) then you
| >aren't vulnerable.
| 
| From Linux Weekly News http://lwn.net 6/20/02
| 
| "Note also that an exploit for 32-bit systems has been posted. It was
| originally stated that 32-bit systems were not vulnerable to
| remote exploits, but that claim has been demonstrated to be false. Given
| the nature of this vulnerability, anybody running an Apache
| server should upgrade sooner rather than later."

Thanks all for the correct details.  Isn't it great when the fix is
released *before* the worm?

-D

-- 

Folly delights a man who lacks judgement,
but a man of understanding keeps a straight course.
        Proverbs 15:21
 
http://dman.ddts.net/~dman/

Attachment: pgppCCkdsOP6s.pgp
Description: PGP signature


Reply to: