Confirmed, new apache exploit

[toddler]

Time to upgrade folks, new remote exploit for apache, posted yesterday. pls see below
for links to the alert....have a good weekend...

http://online.securityfocus.com/news/493

I know it says its only for openbsd, however you can bet it will be ported to every other flavor very very soon....

todd

[Fletch XXX]

[mike503]

i wouldn't think it could be ported since they cite a "kernel bug" available in openBSD to gain root privs.

i'm not sure the kernel architectures in other BSD's, but i'm sure they're different.

obviously other platform kernels are completely different as well..

[toddler]

i still say give it time, someone will make it work.

[mike503]

i don't. linux exploits are far easier to write than openbsd. they would have figured that one out prior to this.

[toddler]

http://httpd.apache.org/info/securit...n_20020620.txt

i'm not going to get into a pissing match regarding whether or not linux/free/etc are
exploitable.

my servers have been upgraded, i recommend others do as well.

[dipshit moron retard]

i posted this like 3 days ago but everybody ignored it and it slid off the list, figured they'll just be the suckers still getting owned by it in 6 months.

[toddler]

agreed....