apache killer

[geeksnotes]

Such a nice vuln
http://seclists.org/fulldisclosure/2011/Aug/241

protecting themselves with:

RequestHeader unset Range
Header unset Accept-Ranges