Apache FCGID module resources exhaustion

FcgidMaxProcessesPerClass limit is no actually working...

CVE-2012-1181: Improper Restriction of Operations within the Bounds of a Memory Buffer

fcgidspawnctl.c in the modfcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service memory consumption via a series of HTTP requests that triggers a process...