Implications of Apache vuln for Oracle

From: Tina Bird (tbird@precision-guesswork.com)
Date: Wed Jun 19 2002 - 14:57:53 PDT

Next message: 3APA3A: "bugtraqat_private list issues"

Previous message: Mark Litchfield: "Fw: ISS Advisory: Remote Compromise Vulnerability in Apache HTTP Server"
Next in thread: Kevin Spett: "Re: Implications of Apache vuln for Oracle"
Reply: Kevin Spett: "Re: Implications of Apache vuln for Oracle"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi all --

Oracle is conspicuously absent from the list of vendors in CERT's Apache
advisory:

http://www.cert.org/advisories/CA-2002-17.html

especially since the bugs were discovered during Oracle testing.  Anyone
have an update on Oracle Application Server for the chunked encoding
issue?

thanks very much -- Tina Bird

"The road of excess leads to the palace of wisdom."
                                  Jade Blue Eclipse

http://www.shmoo.com/~tbird
Log Analysis http://www.counterpane.com/log-analysis.html
VPN http://vpn.shmoo.com

Next message: 3APA3A: "bugtraqat_private list issues"
Previous message: Mark Litchfield: "Fw: ISS Advisory: Remote Compromise Vulnerability in Apache HTTP Server"
Next in thread: Kevin Spett: "Re: Implications of Apache vuln for Oracle"
Reply: Kevin Spett: "Re: Implications of Apache vuln for Oracle"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Jun 19 2002 - 18:17:18 PDT