Re: SSL problems in woody (slapper)

2002-09-21 Thread Lupe Christoph
On Friday, 2002-09-20 at 09:18:44 +0200, Bjarne Østby wrote: > /home/bjarne# ./ssl-test xxx.xxx.xxx.31 > xxx.xxx.xxx.31 443 PATCHED: detects small overflow, but crashes (0.9.6e) > I checked the apache prosess on the server after I ran the test. It had not > crashed. > Is it only the child p

Re: SSL problems in woody (slapper)

2002-09-21 Thread Lupe Christoph
On Friday, 2002-09-20 at 09:18:44 +0200, Bjarne Østby wrote: > /home/bjarne# ./ssl-test xxx.xxx.xxx.31 > xxx.xxx.xxx.31 443 PATCHED: detects small overflow, but crashes (0.9.6e) > I checked the apache prosess on the server after I ran the test. It had not crashed. > Is it only the child pro

Re: SSL problems in woody (slapper)

2002-09-20 Thread Bjarne Østby
On Fri, Sep 20, 2002 at 04:03:32PM +0200, Johann Spies wrote: > On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: > > Reading on the list about the slapper worm I thought I should check what > > my servers return when tested with the openssl-sslv2-master script > > (http://cert.uni-st

Re: SSL problems in woody (slapper)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: > Reading on the list about the slapper worm I thought I should check what > my servers return when tested with the openssl-sslv2-master script > (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). > > (apache was rest

Re: SSL problems in woody (slapper)

2002-09-20 Thread Bjarne Østby
On Fri, Sep 20, 2002 at 04:03:32PM +0200, Johann Spies wrote: > On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: > > Reading on the list about the slapper worm I thought I should check what > > my servers return when tested with the openssl-sslv2-master script >(http://cert.uni-stut

Re: SSL problems in woody (slapper)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: > Reading on the list about the slapper worm I thought I should check what > my servers return when tested with the openssl-sslv2-master script >(http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). > > (apache was rest

Re: SSL problems in woody (slapper)

2002-09-20 Thread Laurent Luyckx
> > How did you compile it. > > My effort failed and I don't have enough knowledge of C to know what > to do: > > > cc -lcrypt -ldl openssl-sslv2-master.c -o openssl-sslv2-master cc -lcrypto will do a better job... > /tmp/cc5fIiWn.o: In function `buffer_md5': > /tmp/cc5fIiWn.o(.text+0x87e):

Re: SSL problems in woody (slapper) (ignore my previous message)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 11:08:25AM +0200, Johann Spies wrote: > On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: > > Reading on the list about the slapper worm I thought I should check what > > my servers return when tested with the openssl-sslv2-master script > > (http://cert.uni-st

Re: SSL problems in woody (slapper)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: > Reading on the list about the slapper worm I thought I should check what > my servers return when tested with the openssl-sslv2-master script > (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). How did you compile

SSL problems in woody (slapper)

2002-09-20 Thread Bjarne Østby
Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). (apache was restarted after upgrade of ssl) /home/bjarne# ./ssl-test xxx.xxx.xxx.31

Re: SSL problems in woody (slapper)

2002-09-20 Thread Laurent Luyckx
> > How did you compile it. > > My effort failed and I don't have enough knowledge of C to know what > to do: > > > cc -lcrypt -ldl openssl-sslv2-master.c -o openssl-sslv2-master cc -lcrypto will do a better job... > /tmp/cc5fIiWn.o: In function `buffer_md5': > /tmp/cc5fIiWn.o(.text+0x87e):

Re: SSL problems in woody (slapper) (ignore my previous message)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 11:08:25AM +0200, Johann Spies wrote: > On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: > > Reading on the list about the slapper worm I thought I should check what > > my servers return when tested with the openssl-sslv2-master script > > (http://cert.uni-s

Re: SSL problems in woody (slapper)

2002-09-20 Thread Johann Spies
On Fri, Sep 20, 2002 at 09:18:44AM +0200, Bjarne Østby wrote: > Reading on the list about the slapper worm I thought I should check what > my servers return when tested with the openssl-sslv2-master script > (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). How did you compile

SSL problems in woody (slapper)

2002-09-19 Thread Bjarne Østby
Reading on the list about the slapper worm I thought I should check what my servers return when tested with the openssl-sslv2-master script (http://cert.uni-stuttgart.de/advisories/openssl-sslv2-master.php). (apache was restarted after upgrade of ssl) /home/bjarne# ./ssl-test xxx.xxx.xxx.3