Apache show server status security vulnerability.

Disable modules for mod_status and mod_info and comment out

#
# SetHandler server-status
# Order deny,allow
# Deny from all
# Allow from .your_domain.com
#