[Gllug] Apache REMOTE ROOT exploit

Thom May thom at positive-internet.com
Fri Jun 21 10:47:28 UTC 2002


* Mark Lowes (hamster at korenwolf.net) wrote :
> On Fri, 2002-06-21 at 10:37, Thom May wrote:
> > As this hasn't been posted, and not everyone on here follows all the
> > security lists (I guess) the hole found in Apache and Apache2 a few days ago
> 
> If you're running a publicly accessible server then reading at least
> bugtraq is a minimum for getting a good nights sleep IMHO.  Though I
> really could have done without having to upgrade a stuffing great pile
> of apache installs all over the network this week.

Agreed, but how many distributions _don't_ install apache virtually by
default? Any user on dial up is potentially vulnerable to this.
-Thom


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list