Bug#365925: marked as done (ssl-cert: post-installation script exits with error 1)

2006-05-07 Thread Debian Bug Tracking System
Your message dated Mon, 08 May 2006 10:12:54 +1000 with message-id <[EMAIL PROTECTED]> and subject line Bug#365925: ssl-cert: post-installation script exits with error 1 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If thi

Re: Apache configuration and security

2006-05-07 Thread Adam Conrad
Keith Seldon wrote: > > If you goto http://domain or http://domain./ all is fine. Unfortunately, if > you goto http://domain// or append any number of '/' to the uri, then you > will be served with a directory listing instead of the index page. > > I have fixed this localy by editiing /etc/ap

Bug#366124: apache2: should mark its listening socket close-on-exec

2006-05-07 Thread Florian Weimer
* Marc Haber: > (1) apache or something running inside the apache process (maybe a php > script using mail()) sends e-mail using /usr/lib/sendmail. > (2) exim, invoked as /usr/lib/sendmail, inherits the listening socket. If Apache behaves like this, it's a security issue, especially if it occ

Bug#365925: ssl-cert: post-installation script exits with error 1

2006-05-07 Thread Christoph Thomas
Package: ssl-cert Version: 1.0.12 Followup-For: Bug #365925 Sorry for bothering you. openssl was not correct installed. Can you please close my bug report? Thanks, Christoph -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable'), (1, 'exper

Apache configuration and security

2006-05-07 Thread Keith Seldon
Hi, I came across a potential security error whilst playing with the default install of Apach2 today. If you goto http://domain or http://domain./ all is fine. Unfortunately, if you goto http://domain// or append any number of '/' to the uri, then you will be served with a directory listin