Re: About web server version

> Hi everybody,

You will need to modify the source code. Unfortunately that won't really fool anyone. Error messages, header formats/etc all provide plenty of information. Check out Rain.Forest.Puppy's presentation on this and his whisker tool available at wiretrip.net.

In any event it doesn't matter, most "generic" web attacks I have seen are not targeted, they simply take a shotgun approach, or if it's a worm it just blasts out at everyone. Much better to spend the time and effort keeping Apache up to date.

Kurt Seifried, kurt@seifried.org
A15B BEE5 B391 B9AD B0EF
AEB0 AD63 0B4E AD56 E574
http://seifried.org/security/ Received on Sat Apr 26 17:44:59 2003