[cobalt-users] Apache still scans as vulnerable

["Chris Lathem" <clathem@xxxxxxxxxxxxx>]

I have a Raq XTR that has the apache update applied to it. Whenever I test
the server with the eeye chunked scanner I still receive a message stating
that the server is vulnerable. I did not patch the server manually; I waited
for the Cobalt released patch. Is there anything special I need to do to get
thing resolved, or is there a problem with the scanner? Has anyone else had
this problem?

I checked the version using /usr/sbin/httpd -v and my response was:

Apache/1.3.20 Sun Cobalt (Unix)
Jun 20 2002 17:41:13

The response from the eeye tool is below:
Apache/1.3.20 Sun Cobalt (Unix) mod_ssl/2.8.4 OpenSSL/0.9.6b PHP/4.0.6
mod_auth_pam_external/0.1 FrontPage/4.0.4.3 mod_perl/1.25

Any help would be appreciated.


Thanks,
Chris Lathem