Numbers about apache might be somewhat off if they only accounted for version numbers...
I run a patched apache 1.3.24 which isn't vulnerable but might be accounted as vulnerable...

Ammo