SCIENTIFIC-LINUX-USERS Archives

August 2006

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: Apache version and CVE-2006-3747
From:
Jaroslaw Polok <[log in to unmask]>
Reply To:
Jaroslaw Polok <[log in to unmask]>
Date:
Thu, 3 Aug 2006 12:54:15 +0200
Content-Type:
text/plain
Parts/Attachments:
text/plain (26 lines) 
Alan J. Flavell wrote:
> On Thu, 3 Aug 2006, Jaroslaw Polok wrote:
> 
>>> (hmmm - is it allowed to say R** H** in SL???  ;-)
>> You rather say TUV (The Upstream Vendor) ;-)
> 
> Yes, but it's not about what *I* say, it's about what the httpd says
> to anyone who cares to ask it.  (At least in 303 - possibly it's been
> amended since, but our new server is awaiting physical installation,
> so I can't ask it).


OK, No it is still the same: Apache X.Y.X (Red Hat) by default.
... We just run a security scan on servers, then cross-check
results looking at exact RPM version installed on the server
to avoid false positives ...

Jarek

-- 
__
-------------------------------------------------------
_ Jaroslaw_Polok ___________________ CERN - IT/FIO/LA _
_ http://home.cern.ch/~jpolok ___ tel_+41_22_767_1834 _
_____________________________________ +41_78_792_0795 _

ATOM RSS1 RSS2