Re: Default installs vulnerable?

[Ed Wilts <ewilts ewilts org>]

On Wed, Jul 20, 2005 at 08:57:53AM +0800, Ed Greshko wrote:
> This leads me to question if default "everything" installs of RH with
> Apache are vulnerable to being compromised or if people are adding some
> additional packages that opens them up to attack.

I don't think that anything has changed since RHEL 3 first came out - a
default install of the first shipment in October, 2003 has *NO* remote
exploits.

In many cases, it's the add-on stuff that has nailed people - things
like awstats and other php penetrations have been popular.

-- 
Ed Wilts, RHCE
Mounds View, MN, USA
mailto:ewilts ewilts org
Member #1, Red Hat Community Ambassador Program