Critical security vulnerability in Apache allows DoS attacks
C|Net | at | by Mike
The Apache Software Foundation has released a patch for its Apache 2.0 HTTP Server to thwart a "significant" denial-of-service vulnerability. Apache, which makes the popular open-source Web server application, released version 2.0.45 to fix a denial-of-service (DoS) problem. A DoS attack floods a network with data, rendering it inaccessible to legitimate queries.
The vulnerability in version 2.0.44 affects all platforms, according to the advisory. But Apache issued a specific warning for OS2 users, noting that for them the new patch still had a DoS vulnerability. That outstanding issue will be fixed with the upcoming release of 2.0.46, but Apache said it was too important to delay the 2.0.45 patch. The foundation urged, "All Apache 2.0 users are encouraged to upgrade now."