Skip to Content.
Sympa Menu

sm-security - Re: [SM-Security] Fwd: [Lvlug] Fwd: [SLL] Apache 1.3 bug (local exploit)

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Seth Alan Woolley <seth AT positivism.org>
  • To: Jason Flatt <jason AT flattfamily.com>
  • Cc: sm-security AT lists.ibiblio.org
  • Subject: Re: [SM-Security] Fwd: [Lvlug] Fwd: [SLL] Apache 1.3 bug (local exploit)
  • Date: Wed, 29 Oct 2003 18:39:26 -0800

Looks like it's been updated already. I integrated to stable just now.
Anybody know the story on the apache-mod_ssl spell?

Seth

On Tue, Oct 28, 2003 at 08:47:55AM -0800, Jason Flatt wrote:
> I just got this from our Local LUG:
>
>
> ---------- Forwarded Message ----------
>
> Subject: [Lvlug] Fwd: [SLL] Apache 1.3 bug (local exploit)
> Date: Tuesday, October 28, 2003 8:19 am
> From: Stealth <stealth AT thcnet.net>
> To: lvlug AT lvlug.org
>
> >Date: Tue, 28 Oct 2003 07:47:53 -0800
> >To: Seattle Linux User's Group <linux-list AT ssc.com>
> >
> >New Apache bugfix out (so new, in fact, that the main web pages have not
> >been updated yet) relating to a local config exploit in mod_alias and
> >mod_rewrite... kudos to the OpenPKG folk for getting this one out in a
> >*hurry*...
> >
> > >From the looks of it, you're only in dire need of an upgrade if you're
> >
> >hosting users you don't trust, and even then, with apache running as
> >something other than root, the damage would be limited, no?
> >
> >OpenPKG alert with much linkage:
> >
> >http://www.openpkg.org/security/OpenPKG-SA-2003.046-apache.html
>
> _______________________________________________
> lvlug mailing list
> lvlug AT lvlug.org
> http://thcnet.net/mailman/listinfo/lvlug
>
> -------------------------------------------------------
>
> --
> Jason Flatt (jason @ flattfamily . com)
> Father of five (http://www.flattfamily.com/)
> Linux user (http://www.sourcemage.org/)
> IRC Nick: Oadae Channels: #sourcemage, #lvlug Server: irc.freenode.net
> PGP Key: E992213F - 0254 9DB7 BE0E 312D 8352 6E39 0700 FB95 E992 213F
>
> _______________________________________________
> SM-Security mailing list
> SM-Security AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-security
>

--
Seth Alan Woolley <seth at positivism.org>, SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A

Attachment: pgpWnFZecErBt.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page