The article says something about running Apache as root -- I've never done that, and I thought it was bad practice. I always switch over to a low-priv user, something like httpd or www-data. Am I missing something about best practices? Who are these people who run a webserver as root?
Sometimes, I think these "bugs" are found when things are performed in a way no one actually does it in the real world.
Not necessarily a bad thing--bugs are found, after all--but it tends to inflate the severity of the found bugs.