apache 1.3.36 vulnerability found / 1.3.37 update?

[aww]

There was an annoucement today about Apache 1.3.36 where an attacker can
exploit mod_rewrite

http://www.kb.cert.org/vuls/id/395412
http://www.apache.org/dist/httpd/Announcement1.3.html

(this also affects apache 2)

My sysadmin say they are waiting for a patch from cpanel.

 

[AndyReed]

There was an annoucement today about Apache 1.3.36 where an attacker can
exploit mod_rewrite

http://www.kb.cert.org/vuls/id/395412
http://www.apache.org/dist/httpd/Announcement1.3.html

(this also affects apache 2)

This issue was posted a few days ago on these forums. Hipe the cPanel team will release an upgrade soon.

 

[chirpy]

Subject is already being discussed in another thread.