Re: FW: Remote Apache 1.3.x Exploit

[Panagiotis Kotsiopoulos <pkotsiop@dsg.internet.gr>]

On Thu, 20 Jun 2002, Jedi/Sector One wrote:

> On Thu, Jun 20, 2002 at 01:58:12AM -0700, auto343553@hushmail.com wrote:
> > Can anyone enlighten me as to whether this exploit will effect OpenBSD 3.1
> > assuming the httpd has been patched from cvs.
>
>   If your httpd has been patched after jun 28, you're safe.
					 ^^^^^^
	Jedi means jun 18, 2 days before today, inspite the advisory is
dated jun 19(yesterday)

>
> > After patching should the version number change or stay the same?
>
>   It stays the same.
>
> --
>  __  /*-      Frank DENIS (Jedi/Sector One) <j@42-Networks.Com>     -*\  __
>  \ '/    <a href="http://www.PureFTPd.Org/";> Secure FTP Server </a>    \' /
>   \/  <a href="http://www.Jedi.Claranet.Fr/";> Misc. free software </a>  \/