There is a serious vulnerability in the cookies module of the Apache httpd, version 1.1.1 and earlier, which makes it possible for remote individuals to obtain access to systems running the Apache httpd.
Remote individuals can obtain access to the web server.
If the httpd services requests as user root, attackers can obtain root access. We strongly advise adminstrators to run their web servers as an unpriviliged user in an chrooted environment whenever possible. Connected to localhost. Apache versions 1.2b0 and later do not appear to be vulnerable. Therefore although the overflow is still present, and prevents users with long host names from accessing the web server, it is not likely to be exploitable.