RE: [cobalt-users] mod_SSL virus - finding version of OpenSSL

["Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>]

> I have RAQ4 and wanted to find what version on OpenSSL I have 
> on it to see if I need to upgrade (to protect against the 
> recent mod_ssl virus).  Could someone shoot me an email on 
> how to find out what verison I am running?  Or point me to a web site?
> 

You could browse your site using NetDemon, http://www.netdemon.net/ and
see:

HTTP/1.1 302 Found
Date: Tue, 24 Sep 2002 13:47:40 GMT
Server: Apache/1.3.20 Sun Cobalt (Unix) PHP/4.1.2 mod_ssl/2.8.4
OpenSSL/0.9.6b mod_auth_pam_external/0.1 FrontPage/4.0.4.3 mod_perl/1.25
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1

That was by guessing, from your email address. Which is why people have
recommended the change to httpd.conf for ServerTokens.


HTTP/1.1 200 OK
Date: Tue, 24 Sep 2002 14:36:01 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2002 16:04:09 GMT
ETag: "d6d66-a2-3cc97a79"
Accept-Ranges: bytes
Content-Length: 162
Connection: close
Content-Type: text/html

-- 
Dan Kriwitsky

Please reply to the list only. Offlist replies are not read.