[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] Apache still scans as vulnerable



>I have a Raq XTR that has the apache update applied to it. Whenever I
>test the server with the eeye chunked scanner I still receive a message
>stating that the server is vulnerable. I did not patch the server
>manually; I waited for the Cobalt released patch. Is there anything
>special I need to do to get thing resolved, or is there a problem with
>the scanner? Has anyone else had this problem?

>I checked the version using /usr/sbin/httpd -v and my response was:

>Apache/1.3.20 Sun Cobalt (Unix)
>Jun 20 2002 17:41:13

My Raq4r has the same display as above for httpd -v. 
Server version: Apache/1.3.20 Sun Cobalt (Unix)
Server built:   Jun 20 2002 19:23:53

My Raq2 has this:
Server version: Apache/1.3.3 Cobalt (Unix)  (Red Hat/Linux)
Server built:   Jun 24 2002 22:16:13

Does this mean the patch didn't take on the Raq4? I've installed, or
attempted to install both patches with successful results or so I thought.

Thanks,

Sean