Stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier and possibly later official versions when running in debug mode allows remote attackers to execute arbitrary code via a long filename in a GET request with an \Accept-Encoding: gzip\ header.