Re: Frontpage extensions under Apache 1.3.4

From: Frank Miller (frankmat_private)
Date: Mon Feb 22 1999 - 11:36:27 PST

  • Next message: Frank Tegtmeyer: "Re: Buffer overflow in www.boutell.com cgic library" 

    Source is available for Apache FP extentions up to Apache 1.3.*.  Have not
performed an audit
of the source.  I have suceeded with minimal munging to apply the patch to
Apache 1.3.4.

They are rather well hidden on the Microsoft FrontPage admin web site ;].

Frank

> -----Original Message-----
> From: Bugtraq List [mailto:BUGTRAQat_private]On Behalf Of Alan Brown
> Sent: Sunday, February 21, 1999 7:16 PM
> To: BUGTRAQat_private
> Subject: Re: Frontpage extensions under Apache 1.3.4
>
>
> On Fri, 19 Feb 1999, Sitzkrieg Redundus wrote:
>
> > I spent the bulk my time a few days back convincing the Frontpage 98
> > extensions and Apache 1.3.4 (patched with patch version 3.0.4.3) to play
> > nicely. After banging my head against it for a few hours, I got
> things to
> > what I thought was a workable point, and fired up httpd. And
> got an error
> > back about there being a syntax error on line 1 of /dev/null.
>
> Has anyone properly audited the current Front Page extensions for any
> Apache server? My understanding is that these are available soley as
> binary/object files and inspection of source is impossible.
>
> I'd love to know if this has changed, as we refuse to install FP
> extensions because for all we know they may be swiss cheese.
>
> Many other apache server admins will have taken the same position.
>
> AB
>

    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:37:13 PDT