[Security-Discuss] apache exploit?

Hello,

We are running mandrake official 10.1, with all the latest updates, as a web server.

Apache is at apache2-common-2.0.50-7.2.101mdk.

We were recently nailed by a cracker called ImFlower, who somehow managed to get in using the apache user, and was running elflbl to try and get root perms.  Is the apache level above patched for all the recent exploits that were patched in the apache.org 2.0.52 release?

Any help on this would be appreciated.

Thanks,

Jason

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________