[cobalt-users] RE: OpenSSL Worm in the wild....

[Scott F <scott_falco@xxxxxxxxx>]

There's some mis-information floating around about the
use of server tokens in Apache that should be cleared
up..  

Users with RaQ3 systems are running Apache 1.3.6 as
Cobalt has never offered any kind of Apache upgrades
to our systems. As such, using the "ServerTokens
ProductOnly" on a RaQ3 is pointless, as it does
nothing under Apache versions prior to 1.3.12. People
with RaQ3 systems (running Apache 1.3.6) will have to
use the following in their httpd.conf file instead:

ServerTokens Minimal

This entry does not provide the same level of disguise
as the "ServerTokens ProductOnly" does under newer
versions of Apache -your Apache will still return
version 1.3.6 to the outside world - just without all
the SSL/PHP and other headers. But since Cobalt has
never upgraded Apache on the RaQ3's that's the only
option available.  :(

Just FYI..


__________________________________________________
Do You Yahoo!?
Yahoo! Autos - Get free new car price quotes
http://autos.yahoo.com