Exploit for Apache from NW6.5SP8 ! ! ! How to resist to it?

Exploit for Apache from NW6.5SP8 ! ! ! How to resist to it? When will be secure update ?
Full Disclosure: Apache Killer
Serg

On 25/08/2011 09:06, skoltogyan wrote:
> Exploit for Apache from NW6.5SP8 ! ! ! How to resist to it? When will
> be secure update ?
>
> 'Full Disclosure: Apache Killer'
> (http://seclists.org/fulldisclosure/2011/Aug/175)
See
http://mail-archives.apache.org/mod_...8.mbox/browser
for some measures that can be taken to mitigate the risk to Apache 2.0.x
whilst a patched version becomes available.
I'll note that for Option 4 (mod_rangecnt) there are NetWare binaries
available for Apache 2.0.x and 2.2.x - see
http://people.apache.org/~dirkx/BINARIES.txt.
HTH.
Simon
Novell Knowledge Partner (NKP)
Do you work with Novell technologies at a university, college or school?
If so, your campus could benefit from joining the Novell Technology
Transfer Partner (TTP) program. See novell.com/ttp for more details.

Similar Messages

  • HT4480 I have redemption codes for FCP from my university - how many machines can I install on?

    I have redemption codes for FCP from my university - how many machines can I install on?

    Do you have these codes because this will be your app? Or is this a "loan" from the school to install on your machine? Do you use your own Apple ID to redeem the code and install the app?
    If it is your app, then you may install it on as many Macs as you own or have in your control.

  • Migedir Error going from NW6.5SP8 to OES2 SP2 on SLES10 SP3

    I've searched the forums and was not able to find this particular problem so hopefully someone more knowledgeable than I can help. I have an issue with the Transfer ID utility erroring out at the DIB copy portion of a NetWare 6.5 SP8 migration to 64-bit OES2 SP2. The eDirectory Precheck and Preparation portion of the Transfer ID complete successfully with green check marks. When the Transfer ID gets to the DIB copy part I get a series of error messages.
    This is the error from the mignds.log file:
    05-05-2011:09:56:20:Information: The DS version on the source server is 10554.
    05-05-2011:09:56:20:Fatal: Setting up the NetWare eDirectory migration environment...
    05-05-2011:09:56:20:Information: Package 'ncpfs' has been installed.
    05-05-2011:09:56:20:Information: Mounting the SYS volume of 'xxx.xxx.xxx.xxx' at /var/opt/novell/.edir_migrate/mnt...
    05-05-2011:09:56:20:Information: SYS mounted successfully.
    05-05-2011:09:56:20:Information: 'novell-ncpserv' package is available.
    05-05-2011:09:56:20:Information: Copied scp peer file (ncpmig.nlm) to source server successfully.
    05-05-2011:09:56:20:Fatal: SERVER: load nlm ncpmig.nlm failed rc=158.
    In the Transfer ID Migration Log this is what appears:
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:*****************Command output start**********************************
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:eDirectory migration utility for Linux
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:Version: 2.0 for OES Linux 2.0
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:Copyright (c) 2007, Novell Inc. All rights reserved.
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:Creating the eDirectory migration file locations...
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:Get the source server administrator credentials -
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir: Enter adminDN(e.g: cn=admin.o=administrators): Enter password:
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:Source server, xxx.xxx.xxx.xxx is reachable.
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:The source server, xxx.xxx.xxx.xxx is running on NetWare platform.
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:OS Version: v5.70.8
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:Product Version: v6.50.8
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:NCP Engine Version: 1
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:NCP Engine Platform: 0:
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:The NetWare source server is running on OES Platform
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:eDirectory packages are installed.
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:Performing pre-migration checks on the source server, 'xxx.xxx.xxx.xxx'...
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:ndscheck performed successfully.
    2011-05-05 09:56:20,761 INFO - ServerIDSwap:migedir:Checking time synchronization between source and target servers.
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:Source and Target servers are in time synchronization
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:Performing eDirectory migration...
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:This may take time depending on the size of the data on the server that is being migrated.
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:The DS version on the source server is 10554.
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:Setting up the NetWare eDirectory migration environment...
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:Package 'ncpfs' has been installed.
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:Mounting the SYS volume of 'xxx.xxx.xxx.xxx' at /var/opt/novell/.edir_migrate/mnt...
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:SYS mounted successfully.
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:'novell-ncpserv' package is available.
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:Copied scp peer file (ncpmig.nlm) to source server successfully.
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:ERROR: Could not load secure NCP NLM, ncpmig.nlm on the source server - SERVER: load nlm ncpmig.nlm failed rc=158..
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:SERVER: load nlm ncpmig.nlm failed rc=158.
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:stty: standard input: Invalid argument
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:stty: standard input: Invalid argument
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:stty: standard input: Invalid argument
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:
    2011-05-05 09:56:20,762 INFO - ServerIDSwap:migedir:*****************Command output end**********************************
    It looks like the Mig utility can't run ncpmig.nlm on the source server for whatever reason. The previous steps completed successfully so I don't think it's an issue of login rights. The OES2 SP2 server is fully patched with all critical and optional patches. I'd like to add that I've done a couple migrations in my test lab prior to this and they both went through smoothly. I'm also following the exact same steps I used when I performed the lab migrations.
    I've also tried the same migration using OES2 SP1 (fully patched and not), OES2 SP2 (non-patched) and OES2 SP3 (patched and not) with the exact same error message. This leads me to believe it's something in the source server causing the issue but I can't, for the life of me, figure out what.
    Source server is running NW6.5 SP8 and eDir 8.7.3.10. Target server is OES2 SP2 and eDir 8.8.5 HP6. Does anyone have insight into why the Transfer ID is failing at the DIB copy? Thanks in advance.

    Sorry for the late reply. Been extremely busy with our migrations and other issues. To answer the last question, our default administrator login to the tree is not called admin. We prefer not to use default names as they decrease security. I used my own login credentials, which also has full rights to the tree, to proceed with the migration. Determined, as a precaution, that the person performing the migration should add him or herself as a trustee to the source/destination servers AND the container the server objects live in. It's probably a redundant step but should decrease the likelihood of encountering the original issue.

  • Dear Apple: Can't recover data from iPad / no exploit for A5 bootrom

    Dear Apple,
    Looks like I'm not the only one who has had a failed upgrade to 6.1.3. Now my mother's iPad 2 is in recovery mode with 1000+ pictures lost in LaLaLand.
    No recent backup, no iCloud.
    I've done lots of research on how I can recover the data and the only possible way seems to be accessing the Ramdisk via SSH.
    But there is no bootrom exploit for A5 devices, so it won't work.
    Thanks Apple, I've lost photos of our family dog that passed this year, as well as photos from my grandmother's memorial service from this year.
    I hope an Apple employee see's this...
    Your process for upgrading iOS versions should be less prone to errors or failures. Required syncs or backups before upgrades should be required.
    I could send my iPad to the main data recovery service Apple has partnered with... but I don't have $400 - $1200 to spend.
    But even if I did, I would assume that only Apple has the power to access the data that is now in a digital vault, protected by their millions of dollars of revenue.
    How can a top-leader in the consumer electronics industry let down so many of their loyal customers? Just google "recover data on iPad" or iPhone and you'll see that 1000's of people across the globe are having the same issue with iOS upgrades.
    Please Apple, at least create a service to allow users to send in devices for data recovery. Only you have the power to "hack" into our devices.
    Sincerly,
    Forever lost memories?

    Apple aren't here. This is a user to user forum.
    You've lost your data because, as you said: "No recent backup, no iCloud." - that's your fault, no-one else's.
    Backing up is necessary regardless of whether you are upgrading or not. Your iPad could've been stolen or damaged and you'd've lost the data the same. Apple provides you with at least 3 ways of retaining copies of your photos - you chose not to use them.
    Call this a lesson learned in the consequences of not backing up as advised.

  • How do we use Script (batch file with msbuild/msbuild project) to build Cordova Project created with Visual Studio Tools for Apache Cordova?

    I use Visual Studio to create Cordova projects. I need to build Cordova projects using msbuild and buildbot via script for my project but I can find only information about how VS combine with Cordova CLI to build multi device hybrid application.

    Hi Samseth,
    Yes, correct, the only thing we can find on the MSDN is:
    Deploy and Run Your App
    And that's the reason why Visual Studio Tools for Apache Cordova existing.
    I think you may get more detail compile information from here:
    http://cordova.apache.org/docs/en/4.0.0/guide_cli_index.md.html
    --James
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • HOW TO?: Need help setting up 3 different iCloud accounts for my kids (so each has own iMessanger)using same Apple ID (mine) ....they don't have their own separate email addresses to work from...how do I do this?

    Need help setting up 3 different iCloud accounts for my kids (so each has own iMessanger)using same Apple ID (mine) ....they don't have their own separate email addresses to work from...how do I do this?

    Any devices connected to the same icloud account can sync all the data on that account.  For this reason an icloud account is really for a single user.
    On a mac, if each user has their own account, then the itunes for that mac account should be set up to connect to that user's icloud account (System preferences>icloud).

  • I have changed my Apple ID from an old email to a new one.  But It keeps coming up with my old email and asking for my old password. How do i stop this from happening and get it onto my new one?

    I have changed my Apple ID from an old email to a new one.  But It keeps coming up with my old email and asking for my old password. How do i stop this from happening and get it onto my new one?  Its on my Ipad and iphone 5, please help as its doing my head it

    How do you update it? Basically what has happened my password was disabled for "security reasons" on sunday (21/10/12), so i tried to reset it, but for some reason i couldnt get into my old email (probably because i havent used it for 2 years), so i read on here i could swap it to a new email that i currently use (which is what i have done) ive swapped everythin over to it (facetime, iCloud etc) but keeps coming up with old email and asking for password

  • How do I move photos in iphoto for ipad from album to album ?

    how do i move photos in iPhoto for iPad from album to album ?

    If you want to move a photo, then you need to use a PC or a Mac. In iPad, you can copy, but this is just a link to the original. It's something I've been wanting to do for a while...but it looks like it needs another photo program to do it.

  • How to prevent iTunes for Windows from "Updating iTunes Library"? (Library is on a NAS and managed by iTunes for Mac. Now getting update wars between Mac and Windows versions of the player.

    How to prevent iTunes for Windows from "Updating iTunes Library"?
    My library is on a NAS and managed by iTunes on a Mac. I can connect from wife's Windows laptop using iTunes for Windows but every time I do, it Updates iTunes Library. Next time I log in from my Mac it Updates iTunes Library in return. It appears I'm experiencing "Update Wars" between the Mac and Windows versions of iTunes. I would like to allow my wife to stream iTunes songs to her new laptop but I don't want any updates from this source... prefer to manage the library from my Mac and not allow Windows to do any thing other than listen to existing playlists.
    Thanks for any help/suggestions.

    Connect the PC to the library on the NAS. Wait while "updated".
    Under Edit > Preferences > Advanced make sure the media folder is correctly pointed at the media folder on the NAS. If not correct, close iTunes, wait a few moments, then open iTunes again.
    Close iTunes on the PC. Do not open iTunes on the Mac.
    Copy the library files, iTunes Library.itl, iTunes Library Extras.itdb, iTunes Library Genius.itdb, sentinel and the folder Album Artwork into an empty iTunes folder on the PC, for example C:\iTunes.
    Click the icon to start iTunes and immediately press and hold down SHIFT. Keep holding until prompted to choose or create a library. Click choose and browse to the copied .itl file, e.g. C:\iTunes\iTunes Library.itl
    The library should now work properly on the PC, however check the setting for the media folder. If needs be correct, close iTunes and reopen.
    Open iTunes on the Mac. It will update again, but that should be last time.
    tt2

  • Somebody uses my apple id for facetime on his iphone how can i remove his phone from my account?

    somebody uses my apple id for facetime on his iphone how can i remove his phone from my account?

    Last Spring I received a couple of emails to an alias I set up a long time ago under mac mail with mac.com - not my main ID - at mac.com.   The mail had the Icloud extension.     I just deleted it.
    I then received a couple of e-mails forwarded to the same alias that came from a non-apple account that led me to search to see if the company was legit - it was.     Using a non-apple hidden account I sent that non-apple account an email informing them apparently when they registered the ID or alias as an ICLOUD extension - apple did not check for duplication in accounts or aliases that were not in the Icloud.
    I also sent feedback to Apple telling them to fix it and apparently they did - along with the person who replicated my alias.
    On this site there were a number of postings from people who also had problems with mac mail and Icloud who resolved it by contacting Apple and getting the accounts cleared up.

  • IPhone question:  Im trying to update applications on my iphone.  When I do it I'm as for password from a different Apple ID from what I have in Itunes.  How do I change so that both are the same?

    IPhone question:  Im trying to update applications on my iphone.  When I do it I'm as for password from a different Apple ID from what I have in Itunes.  How do I change so that both are the same?

    All apps are tied to the apple id that it was used to purchase or download the app.
    did you use a different id to buy the app?
    you can change id, settings - appstore - apple id - log out and log in with correct id.

  • I have added a 5 songs from a single album and in Ipod it comes as enigma album and in that one song is available and another album named enigma and another song. IT happens for 5 songs also. How to make all the 5 songs in one album name Enigma

    I have added a 5 songs from a single album and in Ipod it comes as enigma album and in that one song is available and another album named enigma and another song. IT happens for 5 songs also. How to make all the 5 songs in one album name Enigma???

    I am working on a friend of mine's 15g ipod(W/dock connector)and I am having the same trouble except it does it to all the songs. I have tried reseting it multiple times, but to no avail.
    I am not sure that this runs on windows XP, it is absolutly archaic (compared to my 5th gen. 30g video).
    Help?
    15g ipod (w/dock connector)   Windows XP  
      Windows XP  

  • ITunes error: The iPhone "iPhone" cannot be synced. You do not have enough access privileges for this operation. is preventing my iPhone from syncing. How do I fix it?

    The iPhone "iPhone" cannot be synced. You do not have enough access privileges for this operation. is preventing my iPhone from syncing. How do I fix it? I have changed permissions until blue in the face. What is going on? Why is this so hard? I just want to sync my phone.
    A little background. My iTunes library is in a shared folder. My Aperture library is on a .DMG in the shared folder with "ignore permissions on this volume" checked. I have added myself with read and write privileges to everything that I can find. What gives? Thanks in advance.

    PC, windows7, iphone4, updated iphone (5.0.1) and itunes (10.5.2.11) software. Started getting "iphone cannot be synced. You do not have enough access privileges for this operation" message.
    Solution I found that worked: Uncheck "Sync photos from Iphone" in Itunes / Devices / Photos tab.

  • Bought a new 4s and need to transfer photos from iCloud to new device. iCloud is giving me an old @me address. I do not have the email or pw  for the iCloud account. How do I retrieve this information? Thanks.

    Bought a new 4s and need to transfer photos from iCloud to new device. iCloud is giving me an old @me address. I do not have the email or pw  for the iCloud account. How do I retrieve this information? Thanks.

    If you need to change the iCloud ID on your new phone you have to go to Settings>iCloud, tap Delete Account, provide the password for the old ID when prompted to turn off Find My iPhone, then sign back in with the ID you wish to use.  If you don't know the password for your old ID, or if it isn't accepted, go to https://appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID.  Click edit next to the primary email account, change it back to your old email address and save the change.  Then edit the name of the account to change it back to your old email address.  You can now use your current password to turn off Find My iPhone on your device, even though it prompts you for the password for your old account ID. Then save any photo stream photos that you wish to keep to your camera roll.  When finished go to Settings>iCloud, tap Delete Account and choose Delete from My iDevice when prompted (your iCloud data will still be in iCloud).  Next, go back to https://appleid.apple.com and change your primary email address and iCloud ID name back to the way it was.  Now you can go to Settings>iCloud and sign in with your current iCloud ID and password.

  • When I try to print sth I can´t choose my printer. Adobe Reader only shows a printer I used years ago.I aleady deleted and reinstalled the Reader and deleted all other printers from the computer.How can I add a new printer to Adobe Reader?Thanks for help!

    When I try to print sth I can´t choose my printer. Adobe Reader only shows a printer I used years ago.I aleady deleted and reinstalled the Reader and deleted all other printers from the computer.How can I add a new printer to Adobe Reader?Thanks for help!

    Hi,
    I would suggest you to uninstall Adobe Reader using the cleaner tool and then re-install the latest version.
    Adobe Cleaner Tool:- Download Adobe Reader and Acrobat Cleaner Tool - Adobe Labs.
    Latest version of Adobe Reader:- http://get.adobe.com/reader/
    If you still experience the same issue, please share the following information:-
    - Screenshot of Adobe Reader showing printer options
    - Screenshot of Microsoft Word showing printer options
    - Screenshot of control panel- Control Panel\All Control Panel Items\Devices and Printers
    Regards,
    Nakul 

Maybe you are looking for

  • Can I get rid of the black bar with the icons on f...

    When on cam with a friend the black bar with the cam, mic icons fills part of screen can I remove this and still get the box to type in

  • Payment Advice FBE1

    Hello, What is the business purpose for the payment advice created using transaction FBE1?

  • HT5409 why can't I play an MPEG4 movie on my mac

    Why can't I play a movie shared from my MacBookPro as an MPEG4 on my MacBook Air or my main Mac computer?

  • Update command error

    Iam updating the below table as like below. Iam using Replace option and getting the below error. But i don't see the value which iam trying to update is not more than 100 aswell. UPDATE prof SET ftp = Replace(ftp,'100.81.52.240','connect.vin.com') W

  • App Store keeps trying to resume Lion download

    Hi there I have Lion installed but the App Store, when I select the "Check for Unfinished Downloads" tries to resume downloading Lion again. Is there a way to stop this and let the App Store know that Lion is not an "unfinished download".