On 25 Aug 2011, at 14:48, Reuben Pearse wrote: > Was the fix the Mez implemented the one that is detailed here? > > http://www.edwiget.name/2011/08/quick-fix-for-apache-cve-2011-3192/#more-179 I've done : a2enmod headers echo "RequestHeader unset Range " >> /etc/apache2/apache2.conf apache2ctl restart (On Debian based servers) David.