Re: [users@httpd] Offtopic: Apache Struts vulnerability: how to detect Struts & will DB encryption help

2017-09-10 Thread Yehuda Katz
Post Apache Struts questions on the Struts mailing list: http://struts.apache.org/mail.html It also happens that you are wrong about where HTTPD runs. Plenty of people have it running perfectly well on Windows. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On S

[users@httpd] Offtopic: Apache Struts vulnerability: how to detect Struts & will DB encryption help

2017-09-10 Thread Sunhux G
Understand Apache web servers (runs on Unix only) & Apache Struts (can run in Windows & appliances) are different things: Q1: Can the various VA scanners (like Nessus & McAfee Vulnerability Manager) detect the presence of Struts or you'll need to login to individual servers/ endpoints or have an a