Re: Apache vulnerability checking

[Alex Balayan <balayan () bigpond net au>]

I don't get any results when I scan with Retina - Apache Chunked Scanner. 
Although I have patch the I should still see resulting outcome of the scan.

The server specs:

HTTP/1.1 200 OK
Date: Wed, 26 Jun 2002 17:22:17 GMT
Server: Apache/1.3.24 (Unix) mod_perl/1.25 PHP/4.0.4pl1 mod_ssl/2.8.8 
OpenSSL/0.9.6
Last-Modified: Thu, 18 Apr 2002 16:00:43 GMT
ETag: "2581e-16e9-3cbeedab"
Accept-Ranges: bytes
Content-Length: 5865
Connection: close
Content-Type: text/html

Any ideas on how I can test to see if my server is still vulnerable?

Thanks in advance.




TH> patch. For instance, eEye's tool reports my patched RH7.2 server as
> TH> "vulnerable", because it only checks the server string, it doesn't try
> TH> to exploit the vulnerability.
>
> That's interesting.. If you sniff the tool, you'll see it does a HEAD, and
> then posts to x.html  with a chunk encoding..  It seems to be doing more
> than just reading the version on the banner. (This is as of 2 hours ago,
> maybe they updated their tool).
>
> It appears to actually exploit it for the testing. I didn't trace the tool
> it self, only from what the packet capture says.