Bug in Apache 2.0.40 on Linux (possibly others): When error_log reaches 2.0 GB in size, each httpd process (including the parent) will die without warning on it's next write to error_log.
An attacker flooding the server with large invalid requests using Keep-Alives, can fill error_log at about a 1:1 ratio to the number of bytes transmitted (including TCP/IP overhead). A single attacker with a fast cable modem could bring down an Apache server in an evening using this method. Note: An email reporting this problem in more detail was sent to [EMAIL PROTECTED] a week ago without response. Graham Wiseman [EMAIL PROTECTED]
