Apache 1.3.28 has Been Released
by Mirko Zorz - Thursday, 24 July 2003.
The Apache Group released version 1.3.28 of the Apache HTTP Server. This version of Apache is principally a security and bug fix release.

Of particular note is that 1.3.28 addresses and fixes 3 potential security issues:
  • CAN-2003-0460 (cve.mitre.org): Fix the rotatelogs support program on Win32 and OS/2 to ignore special control characters received over the pipe. Previously such characters could cause it to quit logging and exit. We would like to thank the Hitachi Incident Response team for their responsible disclosure of this issue.
  • VU#379828: The server could crash when going into an infinite loop due to too many subsequent internal redirects and nested subrequests.
  • Eliminated leaks of several file descriptors to child processes, such as CGI scripts.
Apache 1.3.28 is available for download from:

http://httpd.apache.org/download.cgi

http://www.apache.org/dist/httpd/

Spotlight

USBdriveby: Compromising computers with a $20 microcontroller

Posted on 19 December 2014.  |  Security researcher Samy Kamkar has devised a fast and easy way to compromise an unlocked computer and open a backdoor on it: a simple and cheap ($20) pre-programmed Teensy microcontroller.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Fri, Dec 19th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //