[cobalt-users] Re: Re:OpenSSL Worm in the wild....

[Charlie Summers <charlie@xxxxxxxxxx>]

At 10:30 PM -0400 9/13/02, Shaun T. Erickson is rumored to have typed:

> This is a new  worm, discovered today.

   (*sigh*) THIS particular exploit is new (actually, this particular worm is
new; the exploit is actually a few weeks old). An exploit depending on the
response of the "Server:" HTTP response field is, I repeat, old news. Old.
News. Not that a reminder isn't useful and all, but this config entry is
hardly valid only for this one new worm, either, and was suggested in July,
or even earlier (my local archives don't go back any farther, and I'm too
lazy to hit the website or pull the CD). Feel free to search the archives
yourself if you believe this is the first time the subject of changing the
result of ServerTokens has come up.

         Charlie