OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] apache.org files are infected?

From: Daniel Bartlett (danf-box.org)
Date: Fri Jul 22 2005 - 08:07:59 CDT

I cannot reproduce it either:-

danfreebox ~ $ wget http://www.apache.org/dist/apr/apr-1.0.1.tar.gz
--14:02:22--  http://www.apache.org/dist/apr/apr-1.0.1.tar.gz
           => `apr-1.0.1.tar.gz'
Resolving www.apache.org... 192.87.106.226
Connecting to www.apache.org[192.87.106.226]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1,058,637 [application/x-gzip]

100%[====================================>] 1,058,637   
526.41K/s            

14:02:24 (524.99 KB/s) - `apr-1.0.1.tar.gz' saved
[1,058,637/1,058,637]

danfreebox ~ $ md5sum apr-1.0.1.tar.gz | cut -d ' ' -f 1
0a3cb911ea1823cfa3e5863892774705
danfreebox ~ $ wget -o /dev/null -O -
http://www.apache.org/dist/apr/apr-1.0.1.tar.gz.md5 | cut -d ' ' -f
2- | sed "s/ //g"
0A3CB911EA1823CFA3E5863892774705
I think you got a bung download.

Dan.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/