[Info-vax] 'Kill tool' released for unpatched Apache server vulnerability

[Richard B. Gilbert]

On 8/24/2011 9:06 PM, VAXman- @SendSpamHere.ORG wrote:
> In article<4e5595b4$0$306$14726298 at news.sunsite.dk>, =?ISO-8859-1?Q?Arne_Vajh=F8j?=<arne at vajhoej.dk>  writes:
>> On 8/24/2011 8:20 PM, VAXman- @SendSpamHere.ORG wrote:
>>> In article<4e5591a9$0$2487$e4fe514c at news2.news.xs4all.nl>, MG<marcogbNO at SPAMxs4all.nl>   writes:
>>>> On 25-8-2011 0:46, Neil Rieck wrote:
>>>>> 'Kill tool' released for unpatched Apache server vulnerability:
>>
>>>>> quote: A patch or new apache release for Apache 2.0 and 2.2 is
>>>>> expected later this week
>>>>>
>>>>> Does anyone know if this affects the OpenVMS flavor of Apache? IIRC,
>>>>> SWS Version 2.2 is based on Apache 2.0.63
>>>>
>>>> Only 62 lines of Perl code.  That certainly would be impressive
>>>> if that little 'effort' would amount to so much.
>>>>
>>>> I haven't tried or tested it myself, I still need to install an
>>>> HTTP server on my nodes (I've been meaning to do so, for my new
>>>> and upcoming website; but, unfortunately, I haven't had the time
>>>> yet to do so).  Are you planning to give it a try yourself?
>>>
>>>
>>> I wanted to but the program doesn't work.  According to:
>>>
>>> http://pirate.is/rovemonteux/2011/08/24/apache-web-server-killer/
>>>
>>> vaxman at Satellite:~/Desktop$ perl killapache.pl<test-host>   <ay number>
>>>
>>> Returns:
>>>
>>> Can't locate Parallel/ForkManager.pm in @INC (@INC contains: /etc/perl
>>> /usr/local/lib/perl/5.10.0 /usr/local/share/perl/5.10.0 /usr/lib/perl5
>>> /usr/share/perl5 /usr/lib/perl/5.10
>>> /usr/share/perl/5.10 /usr/local/lib/site_perl .) at killapache.pl line 11.
>>> BEGIN failed--compilation aborted at killapache.pl line 11.
>>
>> Looks as if you need this:
>>    http://search.cpan.org/~dlux/Parallel-ForkManager-0.7.5/
>
> OK.  But the site has no instructions about how to use this.  I've downloaded
> and unzipped it into a directory off of my $HOME but there's no make install.

Oh!  Poor baby!  You'll just have to brutalize it.