Re: [WebDNA] PCI fubar

This WebDNA talk-list message is from

2012


It keeps the original formatting.
numero = 109178
interpreted = N
texte = Robert Minor wrote: > I have a server running apache1.3 and webdna 6.0a. After PCI testing I recieved a series of issues that had to be addressed. I was able to mitigate all of them save 1. > > Apache HTTP Server httpOnly Cookie Information Disclosure > > It seems apache1.3 is vulnerable to this attack and the only way to pass is to upgrade to apache2.2.2. > > So just a few questions. > > Can I run apache2.2 under tiger 10.4? I assume yes. > does the webdna module have to be upgraded? > if so what version? What issues can I expect? > Do I need to just rebuild the server under leopard 10.5--------------------------------------------------------- Hi Bob, There is an apache2x module for PowerPC, if that is what you are getting at. It runs with 6.0a. Donovan Donovan Brooke WebDNA Software Corporation http://www.webdna.us **[Square Bracket Utopia]** Associated Messages, from the most recent to the oldest:

    
  1. Re: [WebDNA] PCI fubar (Donovan Brooke 2012)
  2. Re: [WebDNA] PCI fubar (Donovan Brooke 2012)
  3. Re: [WebDNA] PCI fubar (Donovan Brooke 2012)
  4. Re: [WebDNA] PCI fubar (Donovan Brooke 2012)
  5. Re: [WebDNA] PCI fubar (christophe.billiottet@webdna.us 2012)
  6. Re: [WebDNA] PCI fubar (Robert Minor 2012)
  7. [WebDNA] PCI fubar (Robert Minor 2012)
Robert Minor wrote: > I have a server running apache1.3 and webdna 6.0a. After PCI testing I recieved a series of issues that had to be addressed. I was able to mitigate all of them save 1. > > Apache HTTP Server httpOnly Cookie Information Disclosure > > It seems apache1.3 is vulnerable to this attack and the only way to pass is to upgrade to apache2.2.2. > > So just a few questions. > > Can I run apache2.2 under tiger 10.4? I assume yes. > does the webdna module have to be upgraded? > if so what version? What issues can I expect? > Do I need to just rebuild the server under leopard 10.5--------------------------------------------------------- Hi Bob, There is an apache2x module for PowerPC, if that is what you are getting at. It runs with 6.0a. Donovan Donovan Brooke WebDNA Software Corporation http://www.webdna.us **[Square Bracket Utopia]** Donovan Brooke

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

nesting limits? (1998) [WebDNA] Debian Lenny, Lighttpd and WebDNA FastCGI ... (2010) [OT] MacWorld Expo (2004) PCS Emailer's role ? (1997) Webcatalog error, Plug-in for Webstar (1996) Banners (1997) Emailer not working (1998) paymethod=cc allows all zeros (1999) Smith Micro - no competition (2000) (1997) LOG IN LOG OUT (1997) Showif, Hideif reverse logic ? (1997) [WebDNA] Error 500 with SUMM=T (2017) problems with WebCat-Plugin () Counting files (1998) Hard Questions ? (1997) Searching multiple Databases (1997) Math with Time (1997) Running 2 two WebCatalog.acgi's (1996) RE: Price recalc based on quantity (1997)