httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 15034] New: - Any protocol is accepted
Date Tue, 03 Dec 2002 20:16:01 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15034>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15034

Any protocol is accepted

           Summary: Any protocol is accepted
           Product: Apache httpd-2.0
           Version: 2.0.43
          Platform: Other
        OS/Version: Windows NT/2K
            Status: NEW
          Severity: Minor
          Priority: Other
         Component: Core
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: morkil@poczta.onet.pl


Apache 2 accepts any protocol in the first line of http request. Using 
netcat/telnet one can "ask" something like this:
GET / SOMETHING/1.0<crlf>
<crlf>
and server answers "normally" - 200 OK (version 1.3 says 400 Bad request), like 
it was HTTP/1.0.
It has been tested on 2.0.43/win32 and 2.0.39/win32.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message