Is there a signature release planned for the Apache vulnerability
disclosed recently? Links with further information is provided below:
Basically a regexp match for the bogus headers would probably detect
this specific tool, but is there a more advanced siganture planned?
Would appreciate any feedback you have on this issue.