Apache 1.3 Web Servers - New security hole (patch, patch, patch)

   It is recommended this critical security update for Apache web servers be applied as soon as possible 

Article: Another big Apache hole found

http://www.computerworld.com/securitytopics/security/story/0,10801,94191,00.html

Linux and Unix vendors are releasing fixes for a critical bug in the popular Web server Apache that could allow attackers to crash the system or execute malicious code. 

The bug affects Apache 1.3.x installations configured to act as proxy servers, which relay requests between a Web browser and the Internet. When a vulnerable server connects to a malicious site, a specially crafted packet can be used to exploit the vulnerability, according to security researcher Georgi Guninski, who has publicly released exploit code.

The bug is most serious on BSD installations, where it may allow code execution, while on other platforms the most likely effect is a system crash, researchers said. A reference in the Common Vulnerabilities and Exposures database can be found here.