Web Hosting Talk







View Full Version : Old Apache versions


roly
05-30-2002, 08:39 PM
is is ok to use old apache versions (like 1.3.6, 1.3.9, 1.3.12) do they have any security holes?

priyadi
05-30-2002, 09:24 PM
Yes, they do contain security holes, nothing very serious though. Browse the security archives at securityfocus.org for more information.

Tim Greer
05-31-2002, 01:32 AM
Originally posted by priyadi
Yes, they do contain security holes, nothing very serious though. Browse the security archives at securityfocus.org for more information.

But thety *can* contain serious holes, especially if this user wants to install it on a Win32 system.

PS: I have a copy of Apache 1.0.0 & Apache 1.1.1, and up, still on my system (not installed, just the file). :-)

priyadi
05-31-2002, 02:32 AM
If you have win32 system, then probably you have more serious security problem to think over. :)

I had Apache 1.0.0 running on an 486 gateway for at least 3 years on my previous job. :)

roly
05-31-2002, 06:30 AM
I use 1.3.6 on Debian GNU/Linux

Are they any reasons to update?

allan
05-31-2002, 10:55 AM
Originally posted by roly

Are they any reasons to update?

Yes (40+ of them to be exact):

http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Apache

clocker1996
05-31-2002, 03:38 PM
LOL

yeah, upgrade to atleast 1.3.24

roly
05-31-2002, 07:53 PM
/me goes off to upgrade