You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2012/03/21 12:52:53 UTC

DO NOT REPLY [Bug 52956] New: 2.2.22 binary shows "host seems vuln" message when "killapache.pl" script is executed.

https://issues.apache.org/bugzilla/show_bug.cgi?id=52956

             Bug #: 52956
           Summary: 2.2.22 binary shows "host seems vuln" message when
                    "killapache.pl" script is executed.
           Product: Apache httpd-2
           Version: 2.2.22
          Platform: PC
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: All
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: matty.roland1@gmail.com
    Classification: Unclassified


When "killapache.pl" script is executed against Opensource Apache 2.2.22
Windows binary, it shows "host seems vuln" message. This behaviour was not
observed in Apache 2.2.21 version. Whether this means CVE-2011-3192
vulnerability is re-introduced in Opensource Apache 2.2.22 version while fixing
the below byterange regression?

*) Fix a regression introduced by the CVE-2011-3192 byterange fix in 2.2.20:
A range of '0-' will now return 206 instead of 200. PR 51878.
[Jim Jagielski]

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 52956] 2.2.22 binary shows "host seems vuln" message when "killapache.pl" script is executed.

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=52956

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID

--- Comment #1 from Eric Covener <co...@gmail.com> 2012-03-21 12:16:16 UTC ---
It's not a good test in the script.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 52956] 2.2.22 binary shows "host seems vuln" message when "killapache.pl" script is executed.

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=52956

--- Comment #2 from Jeff Trawick <tr...@apache.org> 2012-03-21 14:48:10 UTC ---
IIRC, the fix to bug 51878 is what leads to killapache.pl claiming "host seems
vuln" even though the vulnerability is resolved.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org