Full Disclosure mailing list archives
Re: SCO Web Site Vulnerable to Slapper?
From: "Larry W. Cashdollar" <lwc () vapid ath cx>
Date: Tue, 19 Aug 2003 08:19:15 -0400 (EDT)
It depends on what they are using for packages, source, .deb, .rpm etc.. It maybe patched but for example redhat packages a patched version of openssl 0.9.6b for RH7.x. https://rhn.redhat.com/errata/RHSA-2002-155.html They could even have hand patched the source themselves. -- larry On Tue, 19 Aug 2003, Gherkin McDonalds wrote:
They seem to be running Apache/1.3.14 (Unix) mod_ssl/2.7.1 OpenSSL/0.9.6 PHP/4.3.2-RC on Linux, which, if I have my facts straight, is vulnerable to <URL:http://www.cert.org/advisories/CA-2002-27.html>.
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- SCO Web Site Vulnerable to Slapper? Gherkin McDonalds (Aug 19)
- Re: SCO Web Site Vulnerable to Slapper? Larry W. Cashdollar (Aug 19)
- Re: SCO Web Site Vulnerable to Slapper? KF (Aug 19)
- Re: SCO Web Site Vulnerable to Slapper? Andreas Gietl (Aug 19)
- Re: SCO Web Site Vulnerable to Slapper? Jeremiah Cornelius (Aug 19)
- Re: SCO Web Site Vulnerable to Slapper? KF (Aug 19)
- RE: SCO Web Site Vulnerable to Slapper? Drew Copley (Aug 19)
- Re: SCO Web Site Vulnerable to Slapper? Anthony Saffer (Aug 19)
- RE: SCO Web Site Vulnerable to Slapper? Justin Shin (Aug 19)
- Re: SCO Web Site Vulnerable to Slapper? Jeremiah Cornelius (Aug 19)
- Re: SCO Web Site Vulnerable to Slapper? KF (Aug 19)
- RE: SCO Web Site Vulnerable to Slapper? Dan Stromberg (Aug 19)