Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 97028 invoked from network); 12 Jan 2005 15:20:06 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 12 Jan 2005 15:20:06 -0000 Received: (qmail 31450 invoked by uid 500); 12 Jan 2005 15:18:33 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 31433 invoked by uid 500); 12 Jan 2005 15:18:33 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: list-post: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 31408 invoked by uid 99); 12 Jan 2005 15:18:33 -0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=RCVD_BY_IP,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (hermes.apache.org: domain of jslive@gmail.com designates 64.233.184.192 as permitted sender) Received: from wproxy.gmail.com (HELO wproxy.gmail.com) (64.233.184.192) by apache.org (qpsmtpd/0.28) with ESMTP; Wed, 12 Jan 2005 07:18:30 -0800 Received: by wproxy.gmail.com with SMTP id 69so310841wri for ; Wed, 12 Jan 2005 07:18:25 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=VOFwspDPMLj+Km3MZ9zTWaQ0H5JUSfW9lAvPgBICYbeDNWXTQiRTth1XAXlnYnrn9waKHWugznvjigJButSePLjtqWg7SJ6jx20kHXEKgafLaOj0DDG9rQtRy71KzIjpImHCwZc2+0/5lNGPFxMlcAgZQQCB8HVcnTZXNFETsWA= Received: by 10.54.44.17 with SMTP id r17mr12078wrr; Wed, 12 Jan 2005 07:18:25 -0800 (PST) Received: by 10.54.3.37 with HTTP; Wed, 12 Jan 2005 07:18:25 -0800 (PST) Message-ID: Date: Wed, 12 Jan 2005 10:18:25 -0500 From: Joshua Slive Reply-To: Joshua Slive To: users@httpd.apache.org, jmf@cybertrex.co.uk In-Reply-To: <61c393069008e7289103c17ffd523002@cybertrex.co.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: <1105539693.7571.27.camel@HAL-9006.gusanos-castillo> <61c393069008e7289103c17ffd523002@cybertrex.co.uk> X-Virus-Checked: Checked Subject: Re: [users@httpd] Sources for known Apache2 Exploits X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N On Wed, 12 Jan 2005 14:35:04 +0000, JM Fraser wrote: > I've been looking at similar offerings on Google to satisfy my own > curiosity. Have found the following, but not found a specific website. Any > further info anyone has got, lets have it! > > http://blogs.msdn.com/michael_howard/archive/2004/10/15/242966.aspx > http://www.linuxsecurity.com/content/view/106494/112/ A couple clicks from the apache http server home page will get you here: http://www.apacheweek.com/features/security-20 That list is authoritative. Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org " from the digest: users-digest-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org