Re: [WebDNA] PCI fubar

This WebDNA talk-list message is from

2012


It keeps the original formatting.
numero = 109179
interpreted = N
texte = Robert Minor wrote: > I have a server running apache1.3 and webdna 6.0a. After PCI testing I recieved a series of issues that had to be addressed. I was able to mitigate all of them save 1. > > Apache HTTP Server httpOnly Cookie Information Disclosure > > It seems apache1.3 is vulnerable to this attack and the only way to pass is to upgrade to apache2.2.2. > > So just a few questions. > > Can I run apache2.2 under tiger 10.4? I assume yes. > does the webdna module have to be upgraded? > if so what version? What issues can I expect? > Do I need to just rebuild the server under leopard 10.5--------------------------------------------------------- For more info: http://www.euca.us/index.html?ra=711746&page=dev Scroll to the bottom of the page. Donovan -- Donovan Brooke WebDNA Software Corporation http://www.webdna.us **[Square Bracket Utopia]** Associated Messages, from the most recent to the oldest:

    
  1. Re: [WebDNA] PCI fubar (Donovan Brooke 2012)
  2. Re: [WebDNA] PCI fubar (Donovan Brooke 2012)
  3. Re: [WebDNA] PCI fubar (Donovan Brooke 2012)
  4. Re: [WebDNA] PCI fubar (Donovan Brooke 2012)
  5. Re: [WebDNA] PCI fubar (christophe.billiottet@webdna.us 2012)
  6. Re: [WebDNA] PCI fubar (Robert Minor 2012)
  7. [WebDNA] PCI fubar (Robert Minor 2012)
Robert Minor wrote: > I have a server running apache1.3 and webdna 6.0a. After PCI testing I recieved a series of issues that had to be addressed. I was able to mitigate all of them save 1. > > Apache HTTP Server httpOnly Cookie Information Disclosure > > It seems apache1.3 is vulnerable to this attack and the only way to pass is to upgrade to apache2.2.2. > > So just a few questions. > > Can I run apache2.2 under tiger 10.4? I assume yes. > does the webdna module have to be upgraded? > if so what version? What issues can I expect? > Do I need to just rebuild the server under leopard 10.5--------------------------------------------------------- For more info: http://www.euca.us/index.html?ra=711746&page=dev Scroll to the bottom of the page. Donovan -- Donovan Brooke WebDNA Software Corporation http://www.webdna.us **[Square Bracket Utopia]** Donovan Brooke

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

NYC-based WebDNA programmers (2003) [OT] Trying to steal databases on our server (2003) WebCat for Unix?? (1997) RequiredFields template (1997) RequiredFields template (1997) Budget system (2003) Further on formula.db failure to calculate shipCost (1997) Generating and appending SKU to a db automatically (1998) New public beta available (1997) username = 115 (1999) [WebDNA] WebDNA hosting options (2020) NY taxRates.db? (1997) Plugin or CGI or both (1997) Re: (1997) WebCatalog for Postcards ? (1997) Country & Ship-to address & other fields ? (1997) Mass Mail (2000) Fun With [TCP Connect] (1998) [BULK] [WebDNA] [BULK] WebDNA 7 - Ready or Not ?? I'm not sure... (2011) World Address Info (2003)