Time on Sat, 14 Sep 2002 23:10:22 +0200


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] [Fwd: Apache OpenSSL worm in the wild] (fwd)


On Sat, Sep 14, 2002 at 12:18:29PM -0400, Jason Costomiris wrote:
> On Fri, Sep 13, 2002 at 05:31:00PM -0400, Fred K Ollinger wrote:
> : This might interest some people.
> 
> Start apt-get'ing, up2date'ing, urpmi'ing, emerge'ing, or whatever you do..

Sorry for the cross post - this was taken from Sun/Cobalt Security:

On Fri, Sep 13, 2002 at 09:54:06PM -0400, Rick Ewart wrote:
> Looks like everyone better at least minimize the info given out by the
> Server... To do so:
> edit /etc/httpd/conf/httpd.conf
> and add the following line:
> ServerTokens ProductOnly
> 
> Then restart Apache...
> /etc/rc.d/init.d/httpd stop
> /etc/rc.d/init.d/httpd start
> 
> HTH...
> Rick



-- 
Regards,

Time



   13

   \
9   .  3   clockbot.net
   /

    6

Attachment: pgpS7grrvGE5v.pgp
Description: PGP signature