[cobalt-users] FW: IMPORTANT eEyeR Partner Announcement - FREE Apache Vulnerability Tool

["Robert Fitzpatrick" <robert@xxxxxxxxxxx>]

It looks as if the Cobalt is vulnerable.....

> 
> Below is the press release we are issuing for a free utility 
> to detect the recent High Risk vulnerability discovered in 
> Apache. Since Apache is such a popular web server, we urge 
> you to forward this to your customer base.
> 
> -------
> 
> June 20, 2002 - eEye(r) Digital Security Offers FREE 
> Vulnerability Scanning Utility to Combat Bug in Apache Web Servers
> 
> Freeware utility will detect the High Risk vulnerability in 
> Apache HTTP Servers that could affect over 60% of web servers 
> worldwide
> 
> (Aliso Viejo, CA) - eEye Digital Security has announced a 
> freeware utility that allows administrators to quickly scan 
> their networks for any systems vulnerable to the recent 
> "Chunked Encoding" exposure found in default versions of 
> Apache HTTP Server. The freeware tool may be downloaded 
> directly from the eEye website at:
> 
http://www.eeye.com/html/Research/Tools/apachechunked.html

An exploit for this vulnerability has been developed and the risk to
servers worldwide could be substantial. To prevent unnecessary damage to
networks, IT administrators are urged to identify vulnerable systems and
correct the issue immediately via instructions provided on the eEye
website.

"eEye is dedicated to helping the IT community stay secure. This free
tool will allow administrators to scan systems for any vulnerable Apache
web servers that need to be patched and guide them through fixing the
problem immediately," stated Marc Maiffret, Chief Hacking Officer of
eEye Digital Security. "We developed this free utility in the past few
days and based the technology off of our popular commercial scanner,
Retina(r)." Customers that need to scan larger networks, a broader-range
of systems, and comprehensively detect vulnerabilities beyond the Apache
chunked encoding issue can use Retina Network Security Scanner.

About eEye Digital Security
eEye Digital Security is a leading developer of high-end network
security products and an active contributor to network security research
and education. eEye offers a variety of network security products
targeted at IT administrators and consultants alike. eEye products are
focused on "proactive" security. These products work in conjunction with
popular tools such as firewalls and intrusion detection systems to
deliver comprehensive assurance. eEye provides global coverage to its
clients through partners and its offices in the US, Switzerland, UK,
France and Spain. eEye products protect the networks and digital assets
of over one thousand corporate and government entities in over forty
countries. The eEye products include Retina(r), Network Security
Scanner, SecureIIS(tm), Application Firewall, and Iris(tm), Network
Traffic Analyzer.

Contacts
United States
Europe
Michele Wessman
Tony Brookes
1.949.349.9062 x109
+41 22 787 2282
mwessman@xxxxxxxx
tbrookes@xxxxxxxx