November 1, 2004 — (WEB HOST INDUSTRY REVIEW) — The Apache Software Foundation (apache.org) released a point upgrade to the recently released 1.3.32 version of the Apache Web Server, according to reports.
Version 1.3.33 includes a fix for CAN-2004-0940, which is a bug in the mod_include module. The bug, according to reports, is essentially a potential buffer overflow that could allow local users who can create SSI documents to execute arbitrary code and trigger a length calculation error.
The release of 1.3.33 came within about a week of the release of 1.3.32, one of the fastest in recent memory.
