               PGP Keyserver Version 7.0,

                  For Windows NT, 2000,

                    Solaris 2.6, 2.8

               Copyright (c) 1990-2002 by 

     Networks Associates Technology, Inc., and its

      Affiliated Companies. All Rights Reserved.



     -----------------------------------------------

     -       HOTFIX FOR APACHE VULNERABILITY       -

     -----------------------------------------------



Thank you for using PGP products.



This ReadMe.txt file contains important information

regarding this Hotfix release.  Network Associates strongly

recommends that you read this entire document. Network

Associates welcomes your comments and suggestions. Please use

the information provided in this file to contact us.



Warning: Export of this software may be restricted by the U.S.

Government.





___________________

WHAT'S IN THIS FILE



- About this Hotfix

- Issues resolved in this Hotfix

- Installing the Hotfix

- Contacting Network Associates

- Copyright and Trademark Attributions





_________________

ABOUT THIS HOTFIX



The Solaris version of this hotfix consists of a single 

.tar file named ChunkHandlingHotfix_Solaris.tar.gz. The

tar file contains two files: httpd and httpd.sig.



The Windows version of the hotfix consists of a single 

compressed .zip file named ChunkHandlingHotfix_Win32.zip.

You can decompress the file using an extraction utility 

such as WinZip. The zip file contains two files: 

ApacheCore.dll and ApacheCore.dll.sig.



You can confirm the integrity of this hotfix by verifying 

the provided sig files. The verification procedure should 

report a good signature from the "Network Associates 

Software Release Key 2002" key.





______________________________

ISSUES RESOLVED IN THIS HOTFIX



1)  PGP Keyserver includes a custom version of the Apache 

    web server (PGPapache). Recently the Apache Software

    Foundation discovered a potential vulnerability in 

    the web server. The problem could make the web server

    vulnerable to Denial of Service (DoS) attacks or remote

    exploits, depending on the server platform. This 

    vulnerability also affects the custom PGP Keyserver

    version of Apache.



    For more information on this issue, see CERT 

    Advisory CA-2002-17:

    http://www.cert.org/advisories/CA-2002-17.html





    This hotfix fixes the PGPapache web server and removes

    the potential vulnerability.





________________________________

INSTALLING THE HOTFIX ON WINDOWS



1.  Extract the files from the hotfix zip file into a folder.



2.  Copy the ApacheCore.dll hotfix file.



3.  Stop the PGPapache service.



4.  Navigate to:

    C:\Program Files\Network Associates\PGP Keyserver\Web\



5.  Replace the existing ApacheCore.dll file with the copy

    of the hotfix file.



6.  Start the PGPapache service again.



    If the web server starts, you have installed the 

    hotfix properly.





________________________________

INSTALLING THE HOTFIX ON SOLARIS



1.  Extract the hotfix files:



    gzip -dc ChunkHandlingHotfix_Solaris.tar.gz | tar xvf -



2.  Stop your Apache web server:

    /etc/init.d/pgpkeyserver-webconsole stop



    Note: Do NOT use the restart command.



3.  Replace the httpd file in your /opt/PGPkeysrv/web/bin/

    directory with the new hotfix httpd file.



4.  Start the Apache web server:

    /etc/init.d/pgpkeyserver-webconsole start



    If the web server starts, you have installed the 

    hotfix properly.





_____________________________

CONTACTING NETWORK ASSOCIATES



You may direct all questions, comments, or requests 

concerning the software you purchased, your registration 

status, or similar issues to the Network Associates 

Customer Service department at the addresses or phone 

numbers listed below.



Contact the Network Associates Customer Service department

between 8:00 a.m. and 8:00 p.m. Central Time, Monday 

through Friday, at:



     Network Associates Customer Service

     4099 McEwen Road, Suite 500

     Dallas, Texas 75244



     Contact information for corporate-licensed

     customers:



     Phone:  (972) 308-9960 

     Email:  services_corporate_division@nai.com

     Web:    http://support.nai.com



     Contact information for retail licensed

     customers:



     Phone:  (972) 308-9960

     Email:  cust_care@nai.com

     Web:    http://www.pgp.com





Send correspondence to the following

Network Associates location:



     Network Associates Corporate Headquarters

     3965 Freedom Circle

     McCandless Towers

     Santa Clara, CA 95054



Or, you can receive online assistance through

any of the following resources:



 1.  World Wide Web:  http://support.nai.com



 2.  Telephone technical support



     Corporate-licensed customers: (972) 308-9960



     Contact Network Associates Customer Service for 

     information about technical support 

     subscription plans.



     Retail-licensed customers:    (972) 855-7044





To provide the answers you need quickly and

efficiently, the Network Associates technical

support staff needs some information about your 

computer and your software. Please have this 

information ready when you call:



 - Program name and version number

 - Computer brand and model

 - Any additional hardware or peripherals

   connected to your computer

 - Operating system type and version numbers

 - Network name, operating system, and version

 - Network card installed, where applicable

 - Modem manufacturer, model, and bits-per-

   second rate, where applicable

 - Relevant browsers or applications and their

   version numbers, where applicable

 - How to reproduce your problem: when it

   occurs, whether you can reproduce it

   regularly, and under what conditions

 - Information needed to contact you by voice,

   fax, or email







*FOR PRODUCT UPGRADES*



Network Associates has a worldwide range of

partnerships and reseller relationships with

hundreds of independent vendors, each of which

can provide you with consulting services, sales

advice, and product support for Network

Associates software. To find a reseller near

your location, see the RESELLER.TXT file

located on your product CD-ROM or installed on

your hard disk. For assistance in locating a

local reseller, you can also contact Network

Associates Customer Service at (972) 

308-9960.





*FOR REPORTING PROBLEMS*



Network Associates prides itself on delivering

a high-quality product. If you find any

problems, please take a moment to review the

contents of this file. If the problem you've

encountered appears in the Known Issues section

of this README.TXT file, Network Associates is

already aware of the problem, and you need not

report it.



If you find any feature that does not appear to

function properly on your system, or if you

believe an application would benefit greatly

from enhancement, please contact Network

Associates or one of its resellers with your

suggestions or concerns.





*FOR ON-SITE TRAINING INFORMATION*



Contact Network Associates Customer Service at

(800) 338-8754.





____________________________________

COPYRIGHT AND TRADEMARK ATTRIBUTIONS



Copyright (c) 2002 Networks Associates Technology, Inc.

All Rights Reserved. No part of this publication may be

reproduced, transmitted, transcribed, stored in a retrieval

system, or translated into any language in any form or by

any means without the written permission of Networks

Associates Technology, Inc., or its suppliers or affiliate

companies.



* TRADEMARKS *



* Active Security, Active Security (in Katakana), 

ActiveHelp, ActiveShield, AntiVirus Anyware and design, 

Bomb Shelter, Certified Network Expert, Clean-Up, 

CleanUp Wizard, CNX, CNX Certification Certified Network 

Expert and design, CyberCop, CyberCop (in Katakana), 

CyberMedia, CyberMedia UnInstaller, Design (stylized N), 

Disk Minder, Distributed Sniffer System, Distributed 

Sniffer System (in Katakana), Dr Solomons, Dr Solomons 

label, Enterprise SecureCast, Enterprise SecureCast (in 

Katakana), EZ SetUp, First Aid, ForceField, GMT, 

GroupShield, GroupShield (in Katakana), Guard Dog, 

HelpDesk, HomeGuard, Hunter, ISDN TEL/SCOPE, LANGuru, 

LANGuru (in Katakana), M and design, Magic Solutions, 

Magic Solutions (in Katakana), Magic University, MagicSpy,

MagicTree, McAfee, McAfee (in Katakana), McAfee and 

design, MultiMedia Cloaking, Net Tools, Net Tools (in 

Katakana), NetCrypto, NetOctupus, NetScan, NetShield, 

NetStalker, Network Associates, NetXray, NotesGuard, 

Nuts & Bolts, Oil Change, PC Medic, PC Medic 97, 

PCNotary, PGP, PGP (Pretty Good Privacy), Pretty Good 

Privacy, PrimeSupport, Recoverkey, Recoverkey  

International, Registry Wizard, ReportMagic, RingFence, 

Router PM, SalesMagic, SecureCast, Service Level Manager,

ServiceMagic, SmartDesk, Sniffer, Sniffer (in Hangul), 

SniffMaster, SniffMaster (in Hangul), SniffMaster (in 

Katakana), SniffNet, Stalker, SupportMagic, TIS, TMEG, 

TNV, TVD, TNS, Total Network Security, Total Network 

Visibility, Total Network Visibility (in Katakana), 

Total Service Desk, Total Virus Defense, Trusted Mail, 

UnInstaller, Virex, Virus Forum, ViruScan, VirusScan, 

WebScan, WebShield, WebShield (in Katakana), WebSniffer,

WebStalker, WebWall, Whos Watching Your Network, 

WinGauge, Your E-Business Defender, ZAC 2000, Zip Manager

are registered trademarks of Network Associates, Inc. 

and/or its affiliates in the US and/or other countries.

All other registered and unregistered trademarks in this

 document are the sole property of their respective owners.





* LICENSE AGREEMENT *



* NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL 

AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, 

WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE

USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH 

TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE 

SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER 

DOCUMENTS THAT ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT

YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS 

A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE 

ON THE WEB SITE FROM WHICH YOU DOWNLOADED THE SOFTWARE 

PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET 

FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF 

APPLICABLE, YOU MAY RETURN THE PRODUCT TO NETWORK 

ASSOCIATES, INC. OR THE PLACE OF PURCHASE FOR A FULL 

REFUND.







