Ory Segal from sanctuminc.com has found a hole in apache versions prior to 1.3.24 which allows an attacker to execute commands on win 32 versions of apache. This is considered a serious threat and you should upgrade immediately. On another note a minor hole in every version was fixed. I have included...

Part two of "Fingerprinting port80 attacks". This paper provides information on web application attack forensics that will help you identify what an attacker might be doing. Part two covers attacks that where not mentioned in the first paper. Fingerprinting Port80 Part 2 (TXT) Fingerprinting Port80 Part 2 (HTML)