Re: [EMAIL PROTECTED] CVE-2007-3008

2008-01-09 Thread John T. Mills
uered! lol John - Original Message From: Joshua Slive <[EMAIL PROTECTED]> To: users@httpd.apache.org Sent: Wednesday, January 9, 2008 2:53:48 PM Subject: Re: [EMAIL PROTECTED] CVE-2007-3008 On Jan 9, 2008 3:05 PM, John T. Mills <[EMAIL PROTECTED]> wrote: > > > I

Re: [EMAIL PROTECTED] CVE-2007-3008

2008-01-09 Thread Joshua Slive
On Jan 9, 2008 3:05 PM, John T. Mills <[EMAIL PROTECTED]> wrote: > > > I'm running 2.2.4 and I've been told I need to manually tweak mod_rewrite.c > to fix CVE-2007-3008. I can't find any mention of this bug in the bug list. I love the "I've been told" stuff. Who told you this, and do they know w

[EMAIL PROTECTED] CVE-2007-3008

2008-01-09 Thread John T. Mills
I'm running 2.2.4 and I've been told I need to manually tweak mod_rewrite.c to fix CVE-2007-3008. I can't find any mention of this bug in the bug list. Here's my info: Server version: Apache/2.2.4 (Unix) Server built: Jun 8 2007 08:19:28 Server's Module Magic Number: 20051115:4 Server loade