www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Theo Liskamp <t.lisk...@prv.gelderland.nl>
Subject mod_proxy/7849: Proxy Server directive to IIS4.0 gives Error-400 when underscores are used.
Date Mon, 11 Jun 2001 10:16:48 GMT

>Number:         7849
>Category:       mod_proxy
>Synopsis:       Proxy Server directive to IIS4.0 gives Error-400 when underscores are
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          support
>Submitter-Id:   apache
>Arrival-Date:   Mon Jun 11 03:20:02 PDT 2001
>Originator:     t.liskamp@prv.gelderland.nl
>Release:        1.3.12 and 1.3.20
HP-UX 11.0 Apache 1.3.20 in combination with 
Windows NT 4.0 sp6a using IIS 4.0 (incl. patch concerning Web Server Folder Traversal Vulnerability,
Q276489 at MicroSoft)
We use Apache as Webserver and Proxy Server directives to IIS4.0 for certain applications.
It all worked until I upgraded an NT server with a patch for vulnerabiltiy issue. Suddenly
the URL's using underscores return "Error 400 ... Malformed request". Did test the following:

- Use the direct URL to server --- everything worked.
- Use another proxy to non-upgraded NT webserver --- everything worked.
- Upgraded from Apache 1.3.12 to 1.3.20 --- same results.

My question is: Are there any known issues about this behaviour when you use Apache (mod_proxy)
proxying to Windows IIS4.0 at a certain patchlevel and if so, how can we solve this problem?

This problem is only repeatable from within our site or you should create a similar setup.

 [In order for any reply to be added to the PR database, you need]
 [to include <apbugs@Apache.Org> in the Cc line and make sure the]
 [subject line starts with the report component and number, with ]
 [or without any 'Re:' prefixes (such as "general/1098:" or      ]
 ["Re: general/1098:").  If the subject doesn't match this       ]
 [pattern, your message will be misfiled and ignored.  The       ]
 ["apbugs" address is not added to the Cc line of messages from  ]
 [the database automatically because of the potential for mail   ]
 [loops.  If you do not include this Cc, your reply may be ig-   ]
 [nored unless you are responding to an explicit request from a  ]
 [developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]

View raw message