Re: Squid vulnerability

[CommonGround Softworks/Phil McNamara <Phil@xxxxxxxxxxxxxx>]

>Hello the list,
>
>Is this vulnerability opens on iTools for Rhapsody and/or Darwin?
>
><http://linux.oreillynet.com/pub/a/linux/2002/07/15/insecurities.html>
>
>
>
>--
>Richard Riegert - iMotep
Hi Richard,
I noted in my iTools 6 logs some time ago that my server was returning 
content (200 response with a byte size) with URL's that did not belong to 
my virtual domains.  I checked all the available squid proxy settings 
that I could find in the itools GUI to make sure they were disabled.  The 
only way I found to return a 404 response to these "exploit URL's" was to 
completely disable squid.
I had sent a couple of emails to Tenon support about this some month's 
back but figured it was low priority.

Phil mc

Phil McNamara
CommonGround Softworks Inc.
info@xxxxxxxxxxxxxx
http://www.commongrnd.com


---------                                ---------
Tenon Intersystems' iTools Mailing List
To unsubscribe:  send mailto://itools-
request@xxxxxxxxxxxxxxx
with the subject: unsubscribe
Find searchable mailin list archives at:
http://itools.blackpepper.co.nz