3 ms·
Theres a good chance they could be using a version that has backported security fixes, but seriously, look at the amount of known vulnerabilities Apache 1.3.29
by mrmondo 13y ago
Theres a good chance they could be using a version that has backported security fixes, but seriously, look at the amount of known vulnerabilities Apache 1.3.29 has:
http://httpd.apache.org/security/vulnerabilities_13.html http://httpd.apache.org/security/vulnerabilities_13.html
- userbinator 13y ago1.3.29 was 10 years ago, and the latest 1.3.42 has only one "moderate" flaw. I think there's a pretty good reason why they're not using 2.x.
- ams6110 13y agoFrom the FAQ: Why isn't a newer version of Apache included? The license on newer versions is unacceptable. Users interested in more modern web servers are encouraged to look at nginx(8) which will hopefully be replacing Apache in base. (the latter has actually happened as of 5.4) Also the Apache 1.3 in OpenBSD had been audited as it was part of the base distribution (i.e. not just a port) and it ran chrooted by default.
- chris_wot 13y agoIs it just me, or is Apache losing mindshare rapidly?