Apache CAN-2004-0700 question

2005-11-23 Thread BY
I have checked and searched lists to find any information about CAN-2004-0700 affecting or not default apache on 3.8, i am sure that the version is fully modified and is not affected by subject CAN. But i need a proof of concept on that. maybe a cvs link could help. Any ideas? thnx

Re: Apache CAN-2004-0700 question

2005-11-23 Thread Niall O'Higgins
On Wed, Nov 23, 2005 at 10:31:21PM +0200, BY wrote: I have checked and searched lists to find any information about CAN-2004-0700 affecting or not default apache on 3.8, i am sure that the version is fully modified and is not affected by subject CAN. But i need a proof of concept on that.

Re: Apache CAN-2004-0700 question

2005-11-23 Thread BY
thanks a lot i guessed so but could not find the proof. regards Niall O'Higgins wrote: On Wed, Nov 23, 2005 at 10:31:21PM +0200, BY wrote: This is a funny one. Diff mod_ssl 2.8.18 and 2.8.19 and you'll get the fix for the format string bug (inline at the end of this email). Look at