Re: apache and CAN-2004-0174

2005-03-24 Thread Joey Hess
Geoff Crompton wrote: > Similarly to my last email, is Debian's apache affected by this? Further > details on http://www.securityfocus.com/bid/9921. > > Debian is listed as being vulnerable. It's a DoS involving a connection > to a little used port. CAN-2004-0174 (Apache before 2.0.49, when usi

Re: apache and CAN-2004-0174

2005-03-22 Thread Christophe Chisogne
Geoff Crompton a écrit : Similarly to my last email, is Debian's apache affected by this? Further Woody isnt affected[1] : CAN-2004-0174: Apache: Denial of service via a "short-lived connection on a rarely-accessed listening socket" Ch. [1] Non-Vulnerability Security Information for woody http://w

apache and CAN-2004-0174

2005-03-22 Thread Geoff Crompton
Similarly to my last email, is Debian's apache affected by this? Further details on http://www.securityfocus.com/bid/9921. Debian is listed as being vulnerable. It's a DoS involving a connection to a little used port. I've not found a correspondind DSA. -- Geoff Crompton Debian System Administr