Re: Apache Vulnerability in WebTen

[Ed Pastore <EPastore@xxxxxxxx>]

> By now most of you have probably see the recent CERT Advisory about
> an Apache Vulnerability:
> http://www.cert.org/advisories/CA-2002-17.html

Is the only vulnerability that it opens the server to a DOS attack, or are
there other vulnerabilities? I'm getting mixed signals from the referenced
documents. By "execute arbitrary code" does that mean they can turn my web
server into a spam sender or something? Or what else?

I too cannot turn on Squid without encountering multiple serious problems,
so need to know the extent of my vulnerability until I can move to a new
server (a slow process, as it is still in budgeting, and as I have a lot of
learning to do beforehand).

Thanks.