Re: SSL problems in woody (slapper)

2002-09-20 Thread Bjarne Østby
On Fri, Sep 20, 2002 at 04:03:32PM +0200, Johann Spies wrote: > On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: > > Reading on the list about the slapper worm I thought I should check what > > my servers return when tested with the openssl-sslv2-master script >

Re: SSL problems in woody (slapper)

2002-09-20 Thread Bjarne Østby
On Fri, Sep 20, 2002 at 04:03:32PM +0200, Johann Spies wrote: > On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: > > Reading on the list about the slapper worm I thought I should check what > > my servers return when tested with the openssl-sslv2-master script &g

SSL problems in woody (slapper)

2002-09-20 Thread Bjarne Østby
Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). (apache was restarted after upgrade of ssl) /home/bjarne# ./ssl-test xxx.xxx.xxx.31

SSL problems in woody (slapper)

2002-09-19 Thread Bjarne Østby
Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). (apache was restarted after upgrade of ssl) /home/bjarne# ./ssl-test xxx.xxx.xxx.3

Apache Chunked Encoding attack

2002-07-01 Thread Bjarne Østby
ss, there would be no down time while the test is performed. This indicates that is actually trys the exploit and not just check the version number of the apache server. Should I worry? Btw, my woody boxes does not show up as vulnerable. -- Bjarne Østby A