0-Day Exploit “Apache-Killer”
Today I read about a 0-day exploit for the apache webserver on golem.de.
A quick test if the webserver on my debian VPS is also vulnerable was successful. 
But the proposed workaround works quite well for me.
Here are the steps, that I did to prevent my own apache webserver from being exploited (default apache2 installation debian squeeze):
#edit /etc/apache2/conf.d/security and add the following line (e.g. at the end of the file):
RequestHeader unset Range
#reload apache
/etc/init.d/apache2 reload
RequestHeader unset Range
#reload apache
/etc/init.d/apache2 reload
Testresults:
Before:
perl apachekiller.pl 62.75.151.120 50
host seems vuln
ATTACKING 62.75.151.120 [using 50 forks]
host seems vuln
ATTACKING 62.75.151.120 [using 50 forks]
After:
perl apachekiller.pl 62.75.151.120 50
Host does not seem vulnerable
Host does not seem vulnerable
GREAT! 
Simply trick, but works fine.
well, personally i don’t recommend doing unset range. You should apply fix for that.
This may help http://www.hackersgarage.com/apache-killer-denial-of-service-flaw-in-apache-webserver.html