[30303] in bugtraq

home help back first fref pref prev next nref lref last post

iDEFENSE Security Advisory 05.30.03: Apache Portable Runtime Denial

daemon@ATHENA.MIT.EDU (Dave Ahmad)
Fri May 30 18:21:30 2003

Date: Fri, 30 May 2003 15:26:46 -0600 (MDT)
From: Dave Ahmad <da@securityfocus.com>
To: bugtraq@securityfocus.com
Message-ID: <Pine.LNX.4.55.0305301524530.7997@mail.securityfocus.com>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="-825423385-1575720452-1054330005=:7997"

---825423385-1575720452-1054330005=:7997
Content-Type: TEXT/PLAIN; charset=US-ASCII



David Mirza Ahmad
Symantec

0x26005712
8D 9A B1 33 82 3D B3 D0 40 EB  AB F0 1E 67 C6 1A 26 00 57 12
Sabbe Dhamma Anatta
---825423385-1575720452-1054330005=:7997
Content-Type: TEXT/plain; name="05.30.03.txt"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.55.0305301526450.7997@mail.securityfocus.com>
Content-Description: 
Content-Disposition: attachment; filename="05.30.03.txt"
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---825423385-1575720452-1054330005=:7997--

home help back first fref pref prev next nref lref last post