Hi.

On Tue, Apr 08, 2014 at 04:49:13PM +0200, Jochen Spieker wrote:

> Am I doing anything wrong? Is the testing tool broken? I also tried the
> one at https://gist.github.com/takeshixx/10107280 which confirms there
> is still a problem on port 443 (HTTPS served by Apache).

No, chances are, you're using the tool correctly.
I'm using this [1] to test servers for this vulnerability (as I can't
force myself to install Go), and your server shows as vulnerable.

[1] http://pastebin.com/WmxzjkXJ

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140408145629.GB22048@x101h

Reply via email to