roly
05-30-2002, 08:39 PM
is is ok to use old apache versions (like 1.3.6, 1.3.9, 1.3.12) do they have any security holes?
![]() | View Full Version : Old Apache versions roly 05-30-2002, 08:39 PM is is ok to use old apache versions (like 1.3.6, 1.3.9, 1.3.12) do they have any security holes? priyadi 05-30-2002, 09:24 PM Yes, they do contain security holes, nothing very serious though. Browse the security archives at securityfocus.org for more information. Tim Greer 05-31-2002, 01:32 AM Originally posted by priyadi Yes, they do contain security holes, nothing very serious though. Browse the security archives at securityfocus.org for more information. But thety *can* contain serious holes, especially if this user wants to install it on a Win32 system. PS: I have a copy of Apache 1.0.0 & Apache 1.1.1, and up, still on my system (not installed, just the file). :-) priyadi 05-31-2002, 02:32 AM If you have win32 system, then probably you have more serious security problem to think over. :) I had Apache 1.0.0 running on an 486 gateway for at least 3 years on my previous job. :) roly 05-31-2002, 06:30 AM I use 1.3.6 on Debian GNU/Linux Are they any reasons to update? allan 05-31-2002, 10:55 AM Originally posted by roly Are they any reasons to update? Yes (40+ of them to be exact): http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Apache clocker1996 05-31-2002, 03:38 PM LOL yeah, upgrade to atleast 1.3.24 roly 05-31-2002, 07:53 PM /me goes off to upgrade |