httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Helmut Schneider" <>
Subject [users@httpd] Re: Apache 2.0.55/win32 + OpenSSL 0.9.8a & OWA Reverse Proxy Problems
Date Mon, 24 Oct 2005 14:10:36 GMT
Manuel Martin ( wrote:

> since 2.0.55 a reverse SSL-proxy (on Windows 2000) which I setup for MS
> Exchange 2003 Outlook Web Access makes problems. The users stumbled over
> the problem that they cannot attach files to their emails. I tried it
> myself: the attachment seems to be uploaded to the server, but is not
> "registered" by Exchange.
> If I downgrade to 2.0.54 + OpenSSL 0.9.8 (I changed Apache while back to
> make that compilation possible) it works fine again.
> I really suspect this change to be the culprit:
> "SECURITY: CAN-2005-2088 (
> proxy: Correctly handle the Transfer-Encoding and Content-Length
> headers.  Discard the request Content-Length whenever T-E: chunked
> is used, always passing one of either C-L or T-E: chunked whenever 
> the request includes a request body.  Resolves an entire class of
> proxy HTTP Request Splitting/Spoofing attacks.  [William Rowe]"
> Has anyone run or _not_ run into this problem with this configuration?

Same problem here using apache 2.0.55 on FreeBSD 5.4.

Please do not feed my mailbox, Swen still does his job well

The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:> for more info.
To unsubscribe, e-mail:
   "   from the digest:
For additional commands, e-mail:

View raw message