[Xitami] Crashing cont'd (OpenSSL/SSLeay...)

[Thomas J. Hruska]

At 12:32 PM 11/4/2002 -0800, Stefan Pantazi writeth:
>Hi,
>
>Just adding some thoughts to this thread. I run XiPro 4d10 on NT4 SP6 and
>the only crashes I experienced (very few) were related either to the FTP or
>to SSL.  The server load is small and I sometimes not boot the machine for
>months.
>
>Stefan

Stefan, has iMatix updated XiPro recently to fix the serious security
issues pertaining to SSLeay embedded in their code base (that is, have you
received any updated executables from iMatix)?

The last I knew, they have not updated the server and this leaves the
Xitami Pro web server open to several __very__ serious security issues that
allow multiple buffer overflow attacks (at least one of which code already
exists).  iMatix has known about these attacks for about 3 months now and
as far as I know they have done nothing about it.  If they have fixed this
problem, then that is one more thing that can be checked off of my internal
bug list.

Hope this helps!


          Thomas J. Hruska -- shinelight@shininglightpro.com
Shining Light Productions -- "Meeting the needs of fellow programmers"
                  http://www.shininglightpro.com/