[Xitami] Fwd: Denial of service vulnerability in Xitami Open Source Web Server

John Jonas xitami@lists.xitami.org
Wed, 24 Sep 2003 18:58:14 -0500


NOTE FOR WINDOWS USERS: What was xi win32.exes (the actual server) is 
xigui32.exe in the 2.4.d10 release just posted.  This is change from the 
2.4.d7 version I was running and maybe other versions.  Since I start 
the server from a desktop icon all I had to do was change the shortcut, 
others may have to do something additional.

Also, neither of the 2.4 or 2.5 zip files released today appear to have 
the installer included.  A major reason that I'm running Xitami is the 
installer had it up and running in under 10 minutes for a newbie to web 
servers.  Without the installer features it is hard to recommend Xitami 
to other newbies.

Pieter Hintjens wrote:

>"Pieter Hintjens" <ph@imatix.com> wrote:
>
>  
>
>>There will be an update of xitami.com with new versions of Xitami that
>>fix this DoS later today.
>>    
>>
>
>This update is now complete, there are new releases of Xitami/2.5 and 
>Xitami/2.4 on www.xitami.com.
>
>Note that the installation procedures have changed.
>
>If you are installing on top of an existing Windows installation, 
>just unzip the packages and chuck the .exe files into the Xitami 
>directory.  The single binary package contains several binaries, for 
>different execution models: GUI, console, service.
>
>If you are installing for Linux or Unix, you will have to build from 
>the source kit.  It _should_ be as simple as running "sh build.sh" 
>from the top-level directory but since we've changed the Xitami build 
>process completely to use a new make tool (RealiBase Boom, see 
>imatix.com), I expect there will be a few issues.
>
>-
>Pieter Hintjens
>iMatix Corporation
>
>
>
>
>--
>Xitami Users Mailing List -- For Xitami support
>To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
>
>  
>