Apache DOS patch [Archive]

Boofo

09-06-2011, 07:07 PM

For anyone running Apache on their servers, this article might be of importance to you.

http://www.infoworld.com/t/web-security/no-quick-death-apache-killer-171576?source=IFWNLE_nlt_wrapup_2011-09-06

souperman

09-07-2011, 07:52 AM

I read the article and it didn't really specify which versions are affected. I run 2.2.19 and by the article, all version seem the affected othen than 2.2.20, is this correct?

Boofo

09-07-2011, 09:14 AM

I think so, yes. I talked to my host last night and they upgraded my Apache with the newest version that has the fix. They told me that the fix was released 4 days ago and that they were trying to catch all the accounts up.

If you run CPanel, it should be available in there.

Boofo

09-14-2011, 08:25 PM

Here we go again. Another Apache update.

https://threatpost.com/en_us/blogs/apache-releases-version-2221-new-fix-range-header-flaw-091411