Debian has issued an update for libapache2-mod-rpaf. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service) in an application using the module.

The vulnerability is caused due to an error when processing certain "X-Forward-For" HTTP headers and can be exploited to cause a segmentation fault in an application using the module via a HTTP request containing a specially crafted "X-Forward-For" header.

Solution
Apply updated packages via the apt-get package manager.

Provided and/or discovered by
Sébastien Bocahu

Original Advisory
DSA-2532-1:
http://www.debian.org/security/2012/dsa-2532

Debian Bug#683984:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683984

Sébastien Bocahu:
http://zecrazytux.net/troubleshooting/apache2-segfault-debugging-tutorial

Deep Links
Links available to Secunia VIM customers