You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2014/11/25 13:45:12 UTC

[Bug 57257] New: Few Bugs

https://issues.apache.org/bugzilla/show_bug.cgi?id=57257

            Bug ID: 57257
           Summary: Few Bugs
           Product: Apache httpd-2
           Version: 2.5-HEAD
          Hardware: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: All
          Assignee: bugs@httpd.apache.org
          Reporter: admin@kamalfuddaentertainment.com

I found few bugs in apache.org and i would like to draw your attention on that

Apache mod_negotiation is enabled which means attacker can easily do
bruteforcing in some file name so you should disabled or change the permission
of some files 

mod_wsgi is outdated update to current  version it has some vulnerability as
well 

Also update openSSL ...

Thank you also need to learn and know about apache bugs bounty program

www.kamalfuddaentertainment.com

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 57257] Few Bugs

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=57257

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID
                 OS|                            |All

--- Comment #1 from Eric Covener <co...@gmail.com> ---
We don't take feedback on apache.org's infrastructure in the httpd bugzilla.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org