Just wondering if the following vuln has been confirmed to affect Apache 1.3.31-6(Testing)? http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0940 http://securitytracker.com/alerts/2004/Oct/1011783.html Can't see any mention of it on http://www.debian.org/security/ Regards, MB