[logs] RE: Rumours about Apache 1.3.22 exploits (fwd)

• Previous message: josegat_private: "[logs] Browsing logs"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi all -- I'll be passing along log data from
the impending Apache/PHP exploit as I see it.

---------- Forwarded message ----------
Date: Tue, 26 Feb 2002 21:38:48 +0300 (MSK)
From: Spare Cycles <cyclesat_private>
To: vuln-devat_private
Subject: RE: Rumours about Apache 1.3.22 exploits

I've got an oldish apache (1.3.9, but without the
directory index, negotiation, and rewrite engine
that have all had security problems) and a not so
old PHP module: 4.0.3pl1 and I decided to check
my logs carefully after reading about this
exploit rumor.

I notice this in the error.log:
[Mon Feb 25 13:51:38 2002] [error] PHP Warning:  No
content-type in POST request in Unknown on line 0
[Mon Feb 25 13:51:38 2002] [notice] child pid 4699 exit
signal Segmentation fault (11)

There is nothing about any POSTs in my access log
for that time.


---------------------------------------------------------------------
To unsubscribe, e-mail: loganalysis-unsubscribeat_private
For additional commands, e-mail: loganalysis-helpat_private

• Previous message: josegat_private: "[logs] Browsing logs"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Feb 27 2002 - 22:43:22 PST