The Apache HTTP Server Project has posted fixes to its Web site for two recently discovered security holes in its popular Apache 1.1.1 freeware Web server. One of the problems could allow a hacker to gain unauthorized access to files on Web servers that use the Apache cookie feature. The other security hole could be exploited to expose the contents of a Web server directory.