Re: SSL problems in woody (slapper)

2002-09-21 Thread Lupe Christoph
On Friday, 2002-09-20 at 09:18:44 +0200, Bjarne Østby wrote: /home/bjarne# ./ssl-test xxx.xxx.xxx.31 xxx.xxx.xxx.31 443 PATCHED: detects small overflow, but crashes (0.9.6e) I checked the apache prosess on the server after I ran the test. It had not crashed. Is it only the child

Re: SSL problems in woody (slapper)

2002-09-21 Thread Lupe Christoph
On Friday, 2002-09-20 at 09:18:44 +0200, Bjarne Østby wrote: /home/bjarne# ./ssl-test xxx.xxx.xxx.31 xxx.xxx.xxx.31 443 PATCHED: detects small overflow, but crashes (0.9.6e) I checked the apache prosess on the server after I ran the test. It had not crashed. Is it only the child

SSL problems in woody (slapper)

2002-09-20 Thread Bjarne Østby
Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). (apache was restarted after upgrade of ssl) /home/bjarne# ./ssl-test

Re: SSL problems in woody (slapper)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). How did you compile

Re: SSL problems in woody (slapper) (ignore my previous message)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 11:08:25AM +0200, Johann Spies wrote: On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script

Re: SSL problems in woody (slapper)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). (apache was

Re: SSL problems in woody (slapper)

2002-09-20 Thread Bjarne Østby
On Fri, Sep 20, 2002 at 04:03:32PM +0200, Johann Spies wrote: On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script

SSL problems in woody (slapper)

2002-09-20 Thread Bjarne Østby
Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). (apache was restarted after upgrade of ssl) /home/bjarne# ./ssl-test

Re: SSL problems in woody (slapper)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). How did you compile

Re: SSL problems in woody (slapper) (ignore my previous message)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 11:08:25AM +0200, Johann Spies wrote: On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script

Re: SSL problems in woody (slapper)

2002-09-20 Thread Laurent Luyckx
How did you compile it. My effort failed and I don't have enough knowledge of C to know what to do: cc -lcrypt -ldl openssl-sslv2-master.c -o openssl-sslv2-master cc -lcrypto will do a better job... /tmp/cc5fIiWn.o: In function `buffer_md5': /tmp/cc5fIiWn.o(.text+0x87e): undefined

Re: SSL problems in woody (slapper)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). (apache was

Re: SSL problems in woody (slapper)

2002-09-20 Thread Bjarne Østby
On Fri, Sep 20, 2002 at 04:03:32PM +0200, Johann Spies wrote: On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script