slapper worm

[jkosin at beta.intcomgrp.com]

> On Mon, 2006-01-23 at 17:11 -0500, James Kosin wrote:
>>
>> My version takes care of the mod_ssl issue he already disabled.  FC1
>> doesn't have a fix or if so it hasn't gone through QA yet.
>
> Do you have a CVE for the ssl issue?  I'd like to see if it is somewhere
> in the QA pipeline.
>

I don't remember... it is either CVE-2005-3352 or CVE-2005-3357.

I usually keep this page book-marked:
http://httpd.apache.org/security/vulnerabilities_20.html

Thanks,
James Kosin
-- 
Scanned by ClamAV - http://www.clamav.net