Re: [cobalt-users] Top command results

["H.P. Stroebel" <hpstr@xxxxxxxxxxxxx>]

Worldwide Beauty Store Staff schrieb:

> FakePHF  (free script)

i don`t know that script. obviously (name) it is to fake the apache`s
phf bug ?

every hacker/cracker only few above script kid level does not even try
anymore the phf exploit, that concerned apache versions until 1.0.3, to
avoid triggering the phf logging function in newer apache versions.

anyone using such software dinosaurs should have some other, more
serious security problems.

of course, auditing tools like nessus try the phf exploit, but you can
use internal apache functions to log/report that (in my opinion,
relatively useless).

in no way does this script (if it is what i assume) provide higher
security.

-- 

H. P.  Stroebel, Germany

CGI-FAQ for Raq-Newbies :
http://users.iol.it/hpstr/

A problem to some is a 'feature' to others.