[Xitami] FTP server on other port ?

[Thomas J. Hruska]

At 08:37 PM 8/15/2002 +0100, bernd hohmann writeth:
>On Thu, 15 Aug 2002 12:25:13 -0600, Patricko wrote:
>
>>first e-mail in 20 days man I wish adelphia would get it going miss this
>>list
>
>uh... we had a discussion about ProtoNova (2002/07/31), an announcement
>of Sokrates 1.73 (2002/08/08), a list test (2002/08/12).

You missed yesterday's (08/14/2002) security issue dealing with Xitami/Pro
and basically anything using OpenSSL (ProtoNova is mentioned, but Apache is
also vulnerable).

For those who missed the message, there are 4-6 very serious security
issues (all documented somewhere on bugtraq) and anything from 0.9.6f and
lower is vulnerable to some sort of DoS/DDoS/Buffer Overflow attack.
Anyone running Xitami/Pro *MUST* upgrade their OpenSSL libraries to avoid a
hostile takeover and/or DoS.

I forgot to mention that this affects ALL users of Xitami/Pro (not just
Windows users).

Hope this helps!


          Thomas J. Hruska -- shinelight@shininglightpro.com
Shining Light Productions -- "Meeting the needs of fellow programmers"
                  http://www.shininglightpro.com/