Re: [cobalt-users] Problems(Nasty Raq Hack + OpenSSL + Htaccess) = Bad_Weekend

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Achieve Website Design wrote:

> Hmmm, I hadn't thought to check htaccess after chmod 755 the authenticate
> file . Now that I have I note that it is not working. What was the original
> permission?

I guess I'd better apologize; I didn't check htaccess either, and didn't
know the mod I publicized caused it to fail until some time this weekend
<frown>.

Nevertheless we left it in place until we had time to install the
complete fix; then changed it back.  Sometimes system security must take
priority over user convenience, especially in the short term.

What we've now come up with is a new problem; some of the systems we
maintain have openssl-perl installed, and we cannot upgrade them
<frown>.

Has anyone come up with the answer?

Jeff
-- 
Jeff Lasman, nobaloney.net, P. O. Box 52672, Riverside, CA  92517 US
Internet & Unix/Linux/Sun/Cobalt Consulting +1 909 778-9980
Our jblists address used on lists is for list email only
To contact us offlist: "http://www.nobaloney.net/contactus.html";