As there is a working exploit against Apache's byte range implementation (CVE-2011-3192, see here), I'd like to disable it until official patches are shipped with my distros (Debian, Ubuntu). The sites are all "normal" websites without big downloads. Are there any disadvantages in disabling the feature besides downloads that can't be resumed?
PS.: I'm disabling the feature by enabling
mod_headers and unsetting the range header using the following line:
RequestHeader unset Range