GOBBLES and errata 005

["T. Kinch" <tdotkinch_(_at_)_yahoo_(_dot_)_com>]

I have not seen anyone else mention this so I thought
I would. I am not a C programmer but if you look at
the source of the exploit (available
athttp://packetstorm.linuxsecurity.com/0206-exploits/apache-scalp.c)
you will see that it is sending a bogus Host: http
header. If your Apache server uses virtual servers
(requires a correct host header) the exploit as
written will not work on you. This obviously does not
mean you are not vulnerable.

kinch
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com