Quarter byte squaw?
Worryingly, many sysadmins seemed unaware both of the Apache 'chunked encoding' bug and of their systems' vulnerability...
This month has seen the elevation of what was thought merely to have been a minor DoS on a limited set of platforms running Apache to a remote-shell exploit on a large number. Worryingly, many sysadmins seem unaware both of the 'chunked encoding' bug and of their systems' vulnerability: a quick search demonstrated that at least three major AV vendors are (at the time of writing) running older versions of Apache that are potentially at risk. Modification of executables to contain malicious code, defaced websites, and red-faced sysadmins seem likely to become the order of the day

01 July 2002
Tags:
virus
del.icio.us
digg this
Poll
Who in your company is responsible for installing software patches?Leave a comment

Jobs
In Virus Bulletin's jobs pages among others:- Senior Malware Researcher (Beaverton/Hillsboro Oregon, United States)
- Malware Analyst (Gaithersburg, MD OR Denver, CO, United States)
Virus Bulletin currently has 148,295 registered users.

