Re: [LUAU] Apache DoS vulnerability

2011-08-25 Thread Jeff Mings
Once again, thanks for the heads-up, Julian. :) On 08/24/2011 10:08 AM, Julian Yap wrote: Here is an article: http://www.theregister.co.uk/2011/08/24/devastating_apache_vuln/ Try running the proof of concept here: https://issues.apache.org/bugzilla/show_bug.cgi?id=51714 I ran it on some CentO

[LUAU] Apache DoS vulnerability

2011-08-24 Thread Julian Yap
Here is an article: http://www.theregister.co.uk/2011/08/24/devastating_apache_vuln/ Try running the proof of concept here: https://issues.apache.org/bugzilla/show_bug.cgi?id=51714 I ran it on some CentOS 5 and 6 (running httpd-2.2.15-5.el6.centos.x86_64) servers which reported no issues.  It ma