httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 61023] New: Reverse proxy closes connection when using special characters in post request
Date Fri, 21 Apr 2017 18:15:40 GMT
https://bz.apache.org/bugzilla/show_bug.cgi?id=61023

            Bug ID: 61023
           Summary: Reverse proxy closes connection when using special
                    characters in post request
           Product: Apache httpd-2
           Version: 2.4.23
          Hardware: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_proxy
          Assignee: bugs@httpd.apache.org
          Reporter: dominik.winkelbauer@respon.se
  Target Milestone: ---

If the following character sequence is used anywhere in a POST Request body,
the reverse proxy server closes the connection before it can be finished:

" | 

In words: <double quotation mark><space><pipe><space>
In hex: \x22\x20\x7C\x20


After doing that you can find the following two lines in the error log:

[proxy_http:error] [pid 6096:tid 7192] (OS 10054)An existing connection was
forcibly closed by the remote host.  : [client xxx.xxx.xxx.xxx:62062] AH02609:
read request body failed to xxx.xxx.xxx.xxx:80 (the.requested.url) from
xxx.xxx.xxx.xxx (), referer: http://the.requested.url
[proxy_http:error] [pid 6096:tid 7192] [client xxx.xxx.xxx.xxx:62062] AH01097:
pass request body failed to xxx.xxx.xxx.xxx:80 (the.requested.url) from
xxx.xxx.xxx.xxx (), referer: http://the.requested.url

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message