Full Disclosure mailing list archives

Re: SCO Web Site Vulnerable to Slapper?


From: "Larry W. Cashdollar" <lwc () vapid ath cx>
Date: Tue, 19 Aug 2003 08:19:15 -0400 (EDT)



It depends on what they are using for packages, source, .deb, .rpm etc..
It maybe patched but for example redhat packages a patched version of
openssl 0.9.6b for RH7.x.

https://rhn.redhat.com/errata/RHSA-2002-155.html

They could even have hand patched the source themselves.

-- larry


On Tue, 19 Aug 2003, Gherkin McDonalds wrote:

They seem to be running Apache/1.3.14 (Unix)
mod_ssl/2.7.1 OpenSSL/0.9.6 PHP/4.3.2-RC on Linux,
which,
if I have my facts straight, is vulnerable to
<URL:http://www.cert.org/advisories/CA-2002-27.html>.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: