Hello...
I have installed the Apache server 2.0.47 on a WINSERVER2000 machine. I am
using it only to serve simple HMTL. I have not specifically installed or
configured Tomcat.
As a precautionary measure, I hit the box using a nessus client from Linux.
When nessus executes its http (80/tcp) tests, it showed that it was possible
to crash windows or the web server by reading a 1000 times, a DOS device
through Tomcat and indicates the following solution: "upgrade your Apache
Tomcat web server to version 4.1.10."
As I mentioned, I never installed Tomcat. Is Tomcat distributed with the
Apache server? Must I upgrade or can I un-install it? Or is nessus assuming
too much?
Thanks
-(dan)
>> Stay informed about: Apache 2.0.47 and Security Hole with nessus?