I am hunting a wired problem:
/etc/rd.c/apache start answers:
Starting httpd [SuSEHelp PHP4 mod_perl Jserv LDAP contrib backhand SAP_fastcgi ] /etc/rc.d/apache: line 286: 5287 Segmentation fault $HTTPD_BIN $INET6 -t -f /etc/httpd/httpd.conf $MODULES >/var/log/httpd/rcappache.log 2>&1
That behavior started yesterday at 5 pm. Before it worked!!!
Here is an extract from Apache Week.. <.....> IIS exploits trigger Apache bug Another worm designed to exploit IIS is affecting an increasing number of servers this week. Apache administrators can spot the worm's attempts at breaking in by groups of around 16 failed requests in a row in server access logs: 195.92.24.111 - - [21/Sep/2001:09:50:53 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 126 - Apache is not vulnerable to these attempts, however under certain circumstances a child may crash due to a bug in mod_include that affects all versions of Apache. If a server uses an ErrorDocument for 404 (request not found) errors which points to a parsed html file which uses a section, then a request containing %2f will result in a segfault. The segfault is harmless and is not a security problem. With all the recent publicity concerning IIS security you would have expected anyone running a critical service on Windows to have installed the latest patches. However according to The Register, "Nimda worm runs riot on IT sites", the recent worm has infected a number of corporate sites who should know better - including Microsoft themselves. No wonder then that in a CNET article, "Commentary: Another worm, more patches", Gartner are recommending that businesses move from IIS to iPlanet or Apache. -- Regards Cliff