Re: [cobalt-users] Apache worm that uses the chunk vulnerability - in the wild

[Jay Summers <jay@xxxxxxxxxxxxxxxxxxxxx>]

> Sun has a patch on sunsolve (RAQ2s perhaps others)
> http://sunsolve.sun.com/patches/cobalt/raq2.eng.html
> 
> Question, does this require the earlier patch
> RaQ2-All-Security-4.0.1-13323.pkg which seems to be
> getting a lot of folks in trouble.(it's the proftpd patch)
> 
> Has anyone done the 13323 pkg on a raq2 yet.

Just applied it today. It just gives you the same error in the logs about
proftpd. Just edit the /etc/proftpd.conf file and hash this out.

 #AllowChmod                    on

> Does this sort of thing alway hit the fan on friday afternoons?

Isn't it Murphy's law or something like that? C'mon Thom where's that link
to Murphy's bio...

-j
-- 
http://www.bizmanuals.com