There’s a new important bug in apache webserver, all versions are affectedtand allows remote attackers to cause a denial of service DoS (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges.
I’ve just tested it, and looks like latest Urchin Software releases aren’t affected 6.603 and 7.100 .
REQUEST HEAD / HTTP/1.1 Host: localhost:9999 Range:bytes=0- Accept-Encoding: gzip Connection: close HTTP/1.1 200 OK
You can read more about this bug here: CVE-2011-3192
Latest posts by David Vallejo (see all)
- SEO meets GA: Tracking search bots visits within measurement protocol - November 16, 2016
- Cross-Domain tracking with clean urls - November 1, 2016
- Bringing back utm_nooverride functionality to Universal Analytics - October 31, 2016