Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

Apache warns Web server admins of DoS attack tool

'Apache Killer' circulates in the wild, say project devs, who promise a patch in 48 hours

Developers of the Apache open-source project today warned users of the popular Web server software that a denial-of-service (DoS) tool is circulating that exploits a bug in the program.

The tool, called "Apache Killer," showed up last Friday in a post to the "Full Disclosure" security mailing list.

Today, the Apache project acknowledged the vulnerability that the attack tool exploits, and said it would release a fix for Apache 2.0 and 2.2 in the next 48 hours.

"A denial of service vulnerability has been found in the way the multiple overlapping ranges are handled by Apache," the group said in a security advisory. According to Apache, all versions in the 1.3 and 2.0 lines are vulnerable to attack.

The group no longer supports the older Apache 1.3.

"An attack tool is circulating in the wild. Active use of this tools has been observed," the advisory stated. "The attack can be done remotely and with a modest number of requests can cause very significant memory and CPU usage on the server."

In lieu of a fix, Apache offered steps administrators can take to defend their Web servers until a patch is available.

According to U.K.-based Netcraft, Apache is the most widely-used Web server software in the world, accounting for 65.2% of all such software currently in use.

Because Apple bundles Apache with Mac OS X -- and maintains the software via its operating system updates -- users running a Mac-based server will have to wait for Apple to deliver a fix.

"It will be interesting to see how Apple rates the bug and how quickly they patch," said Andrew Storms, director of security operations at nCircle, in an interview today via instant messaging.

Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at @gkeizer, on Google+ or subscribe to Gregg's RSS feed. His e-mail address is gkeizer@computerworld.com.

See more articles by Gregg Keizer.

Read more about security in Computerworld's Security Topic Center.

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: Andrew, Apache, Apple, Google, Killer, Microsoft, nCircle, Netcraft, Topic
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: internet, Malware and Vulnerabilities, Netcraft, security
Latest Blog Posts
Whitepapers
  • Best Practices for Secure Enterprise Content Mobility
    To secure mobile devices while enabling employees to share data securely, organisations need a comprehensive and flexible solution for secure enterprise content mobility. A secure enterprise content mobility solution complements Mobile Device Management (MDM) solutions and enables mobile workers to easily share data with other authorised users, while ensuring that data is always secure and IT operations are always compliant. Read this whitepaper to learn: How the popularity of Bring Your Own Device (BYOD) is creating new security challenges; Why MDM is useful, but not sufficient; How enterprise content mobility provides an essential layer of security and control for organisations with mobile users.
    Learn more »
  • Oracle Exadata - Extreme performance, lowest cost.
    As organizations contend with escalating demands for greater quantities of information, more sophisticated data analysis, and a burgeoning user population, Oracle Exadata makes database workloads faster, easier to manage, and less expensive. Oracle Exadata is the world’s first database machine to provide extreme performance for both data warehousing and online transaction processing (OLTP) applications. Read this whitepaper.
    Learn more »
  • Think print, Think security - Plugging the printer security gap
    The widespread use of networked printers and multifunction peripherals (MFPs) which scan, print, fax, copy and email has increased productivity in the production of all types of business output. However, the growing sophistication of these devices has also increased security risks associated with printing. Network connectivity, along with hard disk and memory storage, means that MFPs are now susceptible to many of the same security risks as PCs and servers alongside the traditional risk of sensitive printed output getting into the wrong hands. However, all too often the security of the print environment is overlooked and little is done to mitigate these threats. Read more.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments