mod_ssl vulnerability in apache 2 - does it affect 1.3?

[Boyle Owen <Ow...@swx.com>]

Greetings,

A DoS vulnerability has been reported in mod_ssl in apache 2 (see
http://secunia.com/advisories/11092/).

Can anyone comment whether this vulnerability is present in mod_ssl in
apache 1.3 or is it simply that mod_ssl, prior to apache 2, is not the
responsibility of ASF?

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.

This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please notify the sender urgently
and then immediately delete the message and any copies of it from your
system. Please also immediately destroy any hardcopies of the message.
You must not, directly or indirectly, use, disclose, distribute, print,
or copy any part of this message if you are not the intended recipient.
The sender's company reserves the right to monitor all e-mail
communications through their networks. Any views expressed in this
message are those of the individual sender, except where the message
states otherwise and the sender is authorised to state them to be the
views of the sender's company. 

Re: mod_ssl vulnerability in apache 2 - does it affect 1.3?

[Mads Toftum <ma...@toftum.dk>]

On Fri, Mar 12, 2004 at 01:17:03PM +0100, Boyle Owen wrote:
> A DoS vulnerability has been reported in mod_ssl in apache 2 (see
> http://secunia.com/advisories/11092/).
> 
> Can anyone comment whether this vulnerability is present in mod_ssl in
> apache 1.3

There has already been a couple of responses to the mod_ssl mailinglist
(where this question belongs) that it doesn't affect 1.3

> or is it simply that mod_ssl, prior to apache 2, is not the
> responsibility of ASF?
> 
It isn't an ASF project. Mod_ssl is a project run by Ralf Engelschall.

vh

Mads Toftum
-- 
`Darn it, who spiked my coffee with water?!' - lwall