RE: More /sumthin

Well whatever bugs this exploits, it seems that from the source code, it is more related to the version of Apache than it is the version of SSL; perhaps something to do with the way they interact. It doesn't even use port 443.

Also being that ./openssl was called and not just plain old openssl, and that -a doesn't appear to be a valid openssl command, it's probably calling a script of sorts and we have no idea what that script does.

> -----Original Message-----
> From: Philipp Hug [mailto:securityfocus@hugit.ch]
> Sent: Wednesday, February 26, 2003 9:23 AM
> To: Sverre H. Huseby; incidents@securityfocus.com

<Pre>Lose another weekend managing your IDS? Take back your personal time.
15-day free trial of StillSecure Border Guard.</Pre> <A href="http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A> Received on Wed Feb 26 18:48:52 2003