Apache on Win 2000 Pro

Cal Marcoux

unread,

Sep 18, 2002, 1:23:48 PM9/18/02

to

I've installed Apache 2.0.40 on Win2K Pro... Apache service appears
to start fine, but the log contains the following error (multiple
occurences):
[Wed Sep 18 13:20:50 2002] [error] (32538)An operation was attempted
on something that is not a socket. : winnt_accept: AcceptEx failed.
Attempting to recover.
[Wed Sep 18 13:10:24 2002] [error] (32538)An operation was attempted
on something that is not a socket. : winnt_accept: AcceptEx failed.
Attempting to recover.

I can't access http://localhost OR http://127.0.0.1 OR
http://computername.

My config file is:

Listen 80
ServerName localhost
UseCanonicalName Off

Any suggestions?

Henrik Andersen

unread,

Sep 18, 2002, 2:51:37 PM9/18/02

to

There is an error in 2.0.40.
Use 2.0.39 instead. And apply the securitypatch.

Henrik

Cal Marcoux

unread,

Sep 18, 2002, 9:12:13 PM9/18/02

to

Henrik Andersen <henrik....@tdcadsl.dk> wrote in message news:<3D88CB39...@tdcadsl.dk>...

> There is an error in 2.0.40.
> Use 2.0.39 instead. And apply the securitypatch.
>

...can't find 2.0.39... Is the security problem fixed in 1.3.26?

Henrik Andersen

unread,

Sep 19, 2002, 1:38:38 AM9/19/02

to

2.0.39 is here:
ftp://ftp.dkuug.dk/pub/apache/httpd/binaries/win32/.old/

The securitypatch is this:

A simple one line workaround in the httpd.conf file will close the
vulnerability. Prior to the first 'Alias' or 'Redirect' directive, add
the following directive to the global server configuration:

RedirectMatch 400 "\\\.\."

Henrik

William A. Rowe, Jr.

unread,

Sep 20, 2002, 12:48:37 PM9/20/02

to

Cal Marcoux wrote:
> I've installed Apache 2.0.40 on Win2K Pro... Apache service appears
> to start fine, but the log contains the following error (multiple
> occurences):
> [Wed Sep 18 13:20:50 2002] [error] (32538)An operation was attempted
> on something that is not a socket. : winnt_accept: AcceptEx failed.
> Attempting to recover.

> Any suggestions?

Usually, it means that your Firewall software didn't provide a complete
implementation of the windows sockets layer. Uninstall your broken
firewall and it should work fine.

Bill

William A. Rowe, Jr.

unread,

Sep 20, 2002, 12:53:35 PM9/20/02

to

Caution: Do not follow Henrik's advise below ... unless you apply
the Redirect patch described at

http://httpd.apache.org/info/security_bulletin_20020809a.txt

And even then, this is not related to a bug in .40... there were
bugs in .40 that will be fixed in .42 (expected over the weekend.)
But .39 and prior are extremely vulnerable due to the above incident.

Bill

William A. Rowe, Jr.

unread,

Sep 20, 2002, 1:21:20 PM9/20/02

to

Henrik... I notice you clarified your comments a little later on
in the thread. Thanks for pointing them at that security workaround
until they update to .42.

Bill

William A. Rowe, Jr.

unread,

Sep 20, 2002, 1:21:34 PM9/20/02

to

The recent bugs announced with the release of 2.0.40 never applied
at all to 1.3.26 because the code was organized quite differently.

Cal Marcoux

unread,

Sep 20, 2002, 8:05:00 PM9/20/02

to

Thanks! Worked like a charm!

Next question <grin>: Can I reinstall the software or is there a
workaround I can use?

Cal.

ReignMan

unread,

Oct 11, 2002, 1:04:17 AM10/11/02

to

mar...@canada.com (Cal Marcoux) wrote in message news:<3f2c5e14.02092...@posting.google.com>...

Wow, I pulled out what little hair I had left on this one. Apache
2.0.43 on my Win2k SP3 would -not- run on two separate OS instances on
two separate machines... Brand new installs on each. The culprit:
McAfee VirusScan 7.0. After I removed this, end of problem. I
reinstalled McAfee VirusScan 6.x with current updates and all remains
well. Now, for McAfee to fix their product...

Larry