devquotes,

You may have heard about the new DDOS tools released by THc yesterday exploiting an OLD CVE :

here is how to protect yourlsef from the vulnerability :

Just edit your SSL configuration files ( or all your vhost files, depend your configuration) as follows:

SSLVerifyDepth 4 # max number of depth
SSLVerifyClient none (ou require)
SSLCipherSuite RC4-SHA:RC4-MD5:HIGH:MEDIUM:!ADH:!DSS:!SSLv2:+3DES # Ciphers suite used in the renegociation
SSLProtocol all -SSLv2 # Let’s disable sslv2
SSLHonorCipherOrder on #using the order we just set

have fun @patching your apache configuration files !