CVE-2011-0419
published 2011-05-16CVE-2011-0419: Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP…
PriorityP333medium4.3CVSS 2.0
AVNACMAuNCNINAP
EXPLOIT
EPSS
30.41%
98.0th percentile
Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | apr-util | — | — |
| apache | apr-util | — | — |
| apache | http_server | — | — |
| apache | http_server | 2.0.0 – 2.0.65 | — |
| apache | http_server | 2.2.0 – 2.2.18 | — |
| apache | httpd | — | — |
| apache | portable_runtime | < 1.4.3 | 1.4.3 |
| apple | mac_os_x | — | — |
| debian | apr | < apr 1.4.4-1 (bookworm) | apr 1.4.4-1 (bookworm) |
| debian | apr | < apr 1.4.5-1 (bookworm) | apr 1.4.5-1 (bookworm) |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| netbsd | netbsd | — | — |
| openbsd | openbsd | — | — |
| oracle | solaris | — | — |
| suse | linux_enterprise_server | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv4.3MEDIUM
vendor_apache4.3
vendor_debian4.3MEDIUM
vendor_redhat4.3MEDIUM
vendor_ubuntu4.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
APR vulnerabilities
vendor_ubuntu·2011-05-24·CVSS 4.3
CVE-2011-0419 [MEDIUM] APR vulnerabilities
Title: APR vulnerabilities
Summary: A denial of service issue exists that affects the Apache web server.
Maksymilian Arciemowicz reported that a flaw in the fnmatch()
implementation in the Apache Portable Runtime (APR) library could allow
an attacker to cause a denial of service. This can be demonstrated
in a remote denial of service attack against mod_autoindex in the
Apache web server. (CVE-2011-0419)
Is was discovered that the fix for CVE-2011-0419 introduced a different
flaw in the fnmatch() implementation that could also result in a
denial of service. (CVE-2011-1928)
Instructions: After a standard system update you need to restart the Apache web
server or any other service that depends on the APR library to make
all the necessary changes.
Red Hat
apr: DoS flaw in apr_fnmatch() due to fix for CVE-2011-0419
vendor_redhat·2011-05-19·CVSS 4.3
CVE-2011-1928 [MEDIUM] apr: DoS flaw in apr_fnmatch() due to fix for CVE-2011-0419
apr: DoS flaw in apr_fnmatch() due to fix for CVE-2011-0419
The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
Red Hat
apr: unconstrained recursion in apr_fnmatch
vendor_redhat·2011-05-10·CVSS 4.3
CVE-2011-0419 [MEDIUM] apr: unconstrained recursion in apr_fnmatch
apr: unconstrained recursion in apr_fnmatch
Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
Mitigation: mod_autoindex can be configured to ignore request query arguments provided by the client by adding IgnoreClient option to the IndexOptions directive:
http://httpd.apache.org/docs/2.2/mod/mod_autoindex.html#indexoptions.ignoreclient
Debian
CVE-2011-0419: apr - Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c i...
vendor_debian·2011·CVSS 4.3
CVE-2011-0419 [MEDIUM] CVE-2011-0419: apr - Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c i...
Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
Scope: local
bookworm: resolved (fixed in 1.4.4-1)
bullseye: resolved (fixed in 1.4.4-1)
forky: resolved (fixed in 1.4.4-1)
sid: resolved (fixed in 1.4.4-1)
trixie: resolved (fixed in 1.4.4-1)
Debian
CVE-2011-1928: apr - The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR)...
vendor_debian·2011·CVSS 4.3
CVE-2011-1928 [MEDIUM] CVE-2011-1928: apr - The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR)...
The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
Scope: local
bookworm: resolved (fixed in 1.4.5-1)
bullseye: resolved (fixed in 1.4.5-1)
forky: resolved (fixed in 1.4.5-1)
sid: resolved (fixed in 1.4.5-1)
trixie: resolved (fixed in 1.4.5-1)
Apache
Apache httpd: CVE-2011-0419
vendor_apache·CVSS 4.3
CVE-2011-0419 Apache httpd: CVE-2011-0419
Apache httpd: CVE-2011-0419
A flaw was found in the apr_fnmatch() function of the bundled APR library. Where mod_autoindex is enabled, and a directory indexed by mod_autoindex contained files with sufficiently long names, a remote attacker could send a carefully crafted request which would cause excessive CPU usage. This could be used in a denial of service attack. Workaround: Setting the 'IgnoreClient' option to the 'IndexOptions' directive disables processing of the client-supplied request query arguments, preventing this attack. Resolution: Update APR to release 1.4.5 (bundled with httpd 2.2.19) or release 0.9.20 (bundled with httpd 2.0.65) Acknowledgements: This issue was reported by Maksymilian Arciemowicz Reported to security team 2011-03-02 Issue public 2011-05-10 Update 2.2.19 rele
GHSA
GHSA-9h43-8fmr-wxgx: The fnmatch implementation in apr_fnmatch
ghsa_unreviewed·2022-05-14·CVSS 4.3
CVE-2011-1928 [MEDIUM] GHSA-9h43-8fmr-wxgx: The fnmatch implementation in apr_fnmatch
The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
GHSA
GHSA-hx32-x2cq-h45v: Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch
ghsa_unreviewed·2022-05-13
CVE-2011-0419 [MEDIUM] CWE-770 GHSA-hx32-x2cq-h45v: Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch
Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
OSV
CVE-2011-1928: The fnmatch implementation in apr_fnmatch
osv·2011-05-24·CVSS 4.3
CVE-2011-1928 [MEDIUM] CVE-2011-1928: The fnmatch implementation in apr_fnmatch
The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
OSV
CVE-2011-0419: Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch
osv·2011-05-16·CVSS 4.3
CVE-2011-0419 [MEDIUM] CVE-2011-0419: Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch
Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
Suricata
ET WEB_SERVER Apache APR apr_fnmatch Stack Overflow Denial of Service
suricata·2011-06-02
CVE-2011-0419 ET WEB_SERVER Apache APR apr_fnmatch Stack Overflow Denial of Service
ET WEB_SERVER Apache APR apr_fnmatch Stack Overflow Denial of Service
Rule: alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_SERVER Apache APR apr_fnmatch Stack Overflow Denial of Service"; flow:established,to_server; urilen:>1400; http.uri; content:"|2F 3F|P|3D 2A 3F 2A 3F 2A 3F 2A 3F 2A 3F|"; pcre:"/(?:\x2a\x3f){700}/"; reference:cve,2011-0419; reference:url,cxib.net/stuff/apr_fnmatch.txt; reference:url,bugzilla.redhat.com/show_bug.cgi?id=703390; classtype:attempted-dos; sid:2012926; rev:5; metadata:created_at 2011_06_02, cve CVE_2011_0419, confidence Medium, signature_severity Major, updated_at 2024_03_06;)
HackerOne
Out-of-date Version (Apache)
hackerone·2019-12-02·CVSS 5.0
[MEDIUM] Out-of-date Version (Apache)
Out-of-date Version (Apache)
URL https://████████/
Identified Version 2.2.15 (contains 4 important and 10 other vulnerabilities)
Latest Version 2.2.31
Vulnerability Database Result is based on 27.10.2016 vulnerability database content.
Vulnerability Details
Link identified you are using an out-of-date version of Apache.
Impact
Since this is an old version of the software, it may be vulnerable to attacks.
Remedy
Please upgrade your installation of Apache to the latest stable version.
Remedy References
•Downloading the Apache HTTP Server
Known Vulnerabilities in this Version
Medium Apache mod_cache and mod_dav Request Handling Denial of Service Vulnerability
The mod_cache and mod_dav modules in the Apache HTTP Server allow remote attackers to cause a denial of service (process
Bugzilla
CVE-2011-1928 apr: DoS flaw in apr_fnmatch() due to fix for CVE-2011-0419
bugzilla·2011-05-19·CVSS 4.3
CVE-2011-1928 [MEDIUM] CVE-2011-1928 apr: DoS flaw in apr_fnmatch() due to fix for CVE-2011-0419
CVE-2011-1928 apr: DoS flaw in apr_fnmatch() due to fix for CVE-2011-0419
A flaw was discovered in the apr_fnmatch() function in the Apache Portable Runtime (APR) library 1.4.4 (or any backported versions that contained the upstream fix for CVE-2011-0419). This could cause httpd workers to enter a hung state (100% CPU utilization).
Discussion:
Created attachment 499921
upstream patch
Patch provided by upstream to correct this issue.
---
This is actually public already:
http://mail-archives.apache.org/mod_mbox/httpd-announce/201105.mbox/%[email protected]%3E
---
Upstream bug and commit:
https://issues.apache.org/bugzilla/show_bug.cgi?id=51219
http://svn.apache.org/viewvc?view=revision&revision=1124328
---
This is CVE-2011-1928.
---
This problem is triggered when us
Bugzilla
CVE-2011-0419 apr: unconstrained recursion in apr_fnmatch
bugzilla·2011-05-10·CVSS 4.3
CVE-2011-0419 [MEDIUM] CVE-2011-0419 apr: unconstrained recursion in apr_fnmatch
CVE-2011-0419 apr: unconstrained recursion in apr_fnmatch
It was discovered that apr's implementation of the fnmatch function - apr_fnmatch - did not limit number of recursive calls used when matching input string against the pattern. Sufficiently complex pattern and sufficient long input could cause apr_fnmatch to consume a lot of CPU time while processing such input.
It was reported that httpd exposes this problem via at least mod_autoindex module, which allows remote users to specify pattern via P=pattern request query argument:
http://httpd.apache.org/docs/2.2/mod/mod_autoindex.html#query
It seems this issue was already corrected in upstream SVN via a complete fnmatch implementation re-write including following commits:
http://svn.apache.org/viewvc?view=revision&revision=1098188
h
http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/fnmatch.c#rev1.22http://cxib.net/stuff/apache.fnmatch.phpshttp://cxib.net/stuff/apr_fnmatch.txtshttp://httpd.apache.org/security/vulnerabilities_22.htmlhttp://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.htmlhttp://marc.info/?l=bugtraq&m=131551295528105&w=2http://marc.info/?l=bugtraq&m=131731002122529&w=2http://marc.info/?l=bugtraq&m=132033751509019&w=2http://marc.info/?l=bugtraq&m=134987041210674&w=2http://secunia.com/advisories/44490http://secunia.com/advisories/44564http://secunia.com/advisories/44574http://secunia.com/advisories/48308http://securityreason.com/achievement_securityalert/98http://securityreason.com/securityalert/8246http://securitytracker.com/id?1025527http://support.apple.com/kb/HT5002http://svn.apache.org/viewvc/apr/apr/branches/1.4.x/strings/apr_fnmatch.c?r1=731029&r2=1098902http://svn.apache.org/viewvc?view=revision&revision=1098188http://svn.apache.org/viewvc?view=revision&revision=1098799http://www.apache.org/dist/apr/Announcement1.x.htmlhttp://www.apache.org/dist/apr/CHANGES-APR-1.4http://www.apache.org/dist/httpd/Announcement2.2.htmlhttp://www.debian.org/security/2011/dsa-2237http://www.mail-archive.com/dev%40apr.apache.org/msg23960.htmlhttp://www.mail-archive.com/dev%40apr.apache.org/msg23961.htmlhttp://www.mail-archive.com/dev%40apr.apache.org/msg23976.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:084http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fnmatch.c#rev1.15http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlhttp://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0507.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0896.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0897.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=703390https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3Ehttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14638https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14804http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/fnmatch.c#rev1.22http://cxib.net/stuff/apache.fnmatch.phpshttp://cxib.net/stuff/apr_fnmatch.txtshttp://httpd.apache.org/security/vulnerabilities_22.htmlhttp://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.htmlhttp://marc.info/?l=bugtraq&m=131551295528105&w=2http://marc.info/?l=bugtraq&m=131731002122529&w=2http://marc.info/?l=bugtraq&m=132033751509019&w=2http://marc.info/?l=bugtraq&m=134987041210674&w=2http://secunia.com/advisories/44490http://secunia.com/advisories/44564http://secunia.com/advisories/44574http://secunia.com/advisories/48308http://securityreason.com/achievement_securityalert/98http://securityreason.com/securityalert/8246http://securitytracker.com/id?1025527http://support.apple.com/kb/HT5002http://svn.apache.org/viewvc/apr/apr/branches/1.4.x/strings/apr_fnmatch.c?r1=731029&r2=1098902http://svn.apache.org/viewvc?view=revision&revision=1098188http://svn.apache.org/viewvc?view=revision&revision=1098799http://www.apache.org/dist/apr/Announcement1.x.htmlhttp://www.apache.org/dist/apr/CHANGES-APR-1.4http://www.apache.org/dist/httpd/Announcement2.2.htmlhttp://www.debian.org/security/2011/dsa-2237http://www.mail-archive.com/dev%40apr.apache.org/msg23960.htmlhttp://www.mail-archive.com/dev%40apr.apache.org/msg23961.htmlhttp://www.mail-archive.com/dev%40apr.apache.org/msg23976.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:084http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fnmatch.c#rev1.15http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlhttp://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0507.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0896.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0897.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=703390https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E
+ 16 more references
2011-05-16
Published