you can find it in your httpd.conf file and/or apache config files that you use which contain the virtualhost configs
for example
/path/to/apache/config/vhost.conf or vhost.include
on debian this would be /etc/apache2/sites-availabe/filename
or servers that use control panels kinda of software it's usually in
/usr/home/username/conf or /usr/home/username/public_html/config
Example of scripts that use logfile piping are pennywize and/or other scripts
that are supposed to prevent login/password theft/sharing/abuse
But also other monitoring scripts that read data from the webserver logs
by method of logfile piping are vulnerable.....
This concerns both php and perl cgi scripts and there's no patch to prevent
this as of now.....
