Web Hosting Talk







View Full Version : Apache, Security Hole.... Can't be true :)


RackMy.com
06-21-2002, 04:53 PM
http://www.cert.org/advisories/CA-2002-17.html

clocker1996
06-21-2002, 06:16 PM
Uhm.....

Wasn't this already discussed in another thread.....??

Haze
06-21-2002, 06:54 PM
http://www.webhostingtalk.com/showthread.php?threadid=55666

mwatkins
06-21-2002, 06:56 PM
Hey Mike, a little Windows bigotry showing? :)

Ironically for you, the issue is far worse on Apache hosted on Netware and Windows platforms.

phhhfft!

:)

RackMy.com
06-21-2002, 07:57 PM
Darn, I was trying to be a smart ass. That will teach me :)

Shyne
06-21-2002, 11:45 PM
RackMy has to go through all these security troubles EVERYDAY.

mwatkins
06-22-2002, 12:40 AM
:D

akashik
06-22-2002, 08:02 AM
Of course the difference is the apache upgrade can be done live, takes no time at all, and doesn't even require a reboot. Lemme see a windows server do that :)

Greg Moore

allan
06-22-2002, 11:50 AM
Originally posted by akashik
Of course the difference is the apache upgrade can be done live, takes no time at all, and doesn't even require a reboot. Lemme see a windows server do that :)


Sure, just install Apache for Windows on it :D

MGCJerry
06-22-2002, 12:05 PM
Originally posted by akashik
Of course the difference is the apache upgrade can be done live, takes no time at all, and doesn't even require a reboot. Lemme see a windows server do that :)

Greg Moore

I'm all upgraded :) I had 1.3.2 now I have 1.3.26 and I didnt even need to reboot :stickout

I had to kill it, and un-install it though, and BTW I'm on windows :eek2: :D

Mike the newbie
06-22-2002, 12:13 PM
Originally posted by akashik
Of course the difference is the apache upgrade can be done live, takes no time at all, and doesn't even require a reboot. Lemme see a windows server do that :)


Another difference is the speed in which the open-source community released the bug fix.

Some Microsoft security fixes take months to be released.

MGCJerry
06-22-2002, 12:26 PM
Another difference is the speed in which the open-source community released the bug fix.

Thats another reason why I like open source :) compared to the likes of M$....

Sorry, but I had to get in my 300th post ;)

RackMy.com
06-22-2002, 02:28 PM
Of course the difference is the apache upgrade can be done live, takes no time at all, and doesn't even require a reboot. Lemme see a windows server do that Most IIS patches (as of late) don't require a reboot and MS is really trying to make more and more like this.

Mike the newbie
06-22-2002, 05:29 PM
Originally posted by RackMy.com
Most IIS patches (as of late) don't require a reboot and MS is really trying to make more and more like this.

Unfortunately, due to the architecture of Windows and IIS (i.e., lots of "co-mingling" between applications and the OS), it is going to become more and more difficult to remove the remaining reboots from the update process.

Windows just was not architected cleanly enough to remove the reboot requirement.