2ND SEPTEMBER 2011 / WEB ANALYTICS
Urchin is not vulnerable to latest Apache DoS bug CVE-2011-3192
There's a new important bug in apache webserver, all versions are affectedtand allows remote attackers to cause a denial of service DoS (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges.
I've just tested it, and looks like latest Urchin Software releases aren't affected 6.603 and 7.100 .
REQUESTHEAD / HTTP/1.1Host: localhost:9999Range:bytes=0-Accept-Encoding: gzipConnection: closeHTTP/1.1 200 OK
You can read more about this bug here: CVE-2011-3192