Secunia

The Apache Software Foundation has released new versions of Apache, which fix two vulnerabilities.

It may be possible to cause a buffer overflow in "mod_alias" and "mod_rewrite" if they are configured with a regular expression with more than 9 captures. Exploitation requires a specially crafted .htaccess file.

Furthermore, in Apache2 the AF_UNIX socket used by "mod_cgid" to communicate with the cgid daemon or CGI script is not handled properly.

Versions 1.3.28 and prior are vulnerable.
Versions 2.0.47 and prior are vulnerable.

Solution
Update to version 2.0.48 or 1.3.29:
Further details available in Customer Area

Provided and/or discovered by
André Malo and Jeff Trawick

Changelog
Further details available in Customer Area

Original Advisory
http://www.apache.org/dist/httpd/Announcement2.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area