Re: Apache chunk handling vulnerability and Apache 1.3.24-3

To: KevinL <darius@obsidian.com.au>
Cc: debian-security@lists.debian.org
Subject: Re: Apache chunk handling vulnerability and Apache 1.3.24-3
From: Jamie Heilman <jamie@audible.transient.net>
Date: Sat, 22 Jun 2002 23:50:10 -0700
Message-id: <[🔎] 20020623065010.GH22189@audible.transient.net>
In-reply-to: <[🔎] 1024804625.28704.1641.camel@ufo>
References: <[🔎] 3D106D5A.350CDE4D@simicro-internet.mg> <[🔎] 1024487873.1144.14.camel@loreto> <[🔎] 1024569033.949.36.camel@mushu> <[🔎] 1024804625.28704.1641.camel@ufo>

> Can someone clarify for me, please (not directly debian related, I know,
> but...) - the patches appear to only be to the chunk-encoding functions
> in mod_proxy.  If mod_proxy isn't loaded, is apache still vulnerable?

its not just mod_proxy, apache was vulnerable regardless
 
-- 
Jamie Heilman                   http://audible.transient.net/~jamie/
"It's almost impossible to overestimate the unimportance of most things."
							-John Logue


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Reply to:

Follow-Ups:
- Re: [d-security] Re: Apache chunk handling vulnerability and Apache 1.3.24-3
  - From: Christian Hammers <ch@westend.com>

References:
- Apache chunk handling vulnerability and Apache 1.3.24-3
  - From: NANTENAINA Tianarivo ulrich <rivo-tech@simicro-internet.mg>
- Re: Apache chunk handling vulnerability and Apache 1.3.24-3
  - From: René Seindal <rene@seindal.dk>
- Re: Apache chunk handling vulnerability and Apache 1.3.24-3
  - From: Paul Hosking <phosking@networkcountermeasures.com>
- Re: Apache chunk handling vulnerability and Apache 1.3.24-3
  - From: KevinL <darius@obsidian.com.au>

Prev by Date: Re: Apache chunk handling vulnerability and Apache 1.3.24-3
Next by Date: Re: Updated Apache packages for testing?
Previous by thread: Re: Apache chunk handling vulnerability and Apache 1.3.24-3
Next by thread: Re: [d-security] Re: Apache chunk handling vulnerability and Apache 1.3.24-3
Index(es):
- Date
- Thread