RE: Rumours about Apache 1.3.22 exploits

From: Spare Cycles (cyclesat_private)
Date: Tue Feb 26 2002 - 10:38:48 PST

  • Next message: Jason Brvenik: "Comcast.net contact?" 

    I've got an oldish apache (1.3.9, but without the
directory index, negotiation, and rewrite engine
that have all had security problems) and a not so
old PHP module: 4.0.3pl1 and I decided to check
my logs carefully after reading about this
exploit rumor.

I notice this in the error.log:
[Mon Feb 25 13:51:38 2002] [error] PHP Warning:  No
content-type in POST request in Unknown on line 0
[Mon Feb 25 13:51:38 2002] [notice] child pid 4699 exit
signal Segmentation fault (11)

There is nothing about any POSTs in my access log
for that time.

    This archive was generated by hypermail 2b30 : Wed Feb 27 2002 - 18:39:03 PST