www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe, Jr." <wr...@rowe-clan.net>
Subject Re: mod_include/8362: Nimda worm and Customizable error response of Apache
Date Wed, 19 Sep 2001 19:38:13 GMT
----- Original Message -----
From: "Thomas"
Sent: Wednesday, September 19, 2001 6:38 PM
Subject: Re: Nimda causes my Apache 1.3.20/NT to crash

> thanks for the hint about the ErrorDocument directive and
> the URL to bug-file by Karlis.
>
> That was right on, disabling the redirects made Dr. Watson leave for good.
>
> However, I did some further investigating to pinpoint exactly what made
> mod_include blow up and found the the problem occurs at  #include.
> Swithing between a file or a virtual attribute doesn't make any difference.
>
> So concluding for now, to preventing the Nimda related segfaults,
> you must remove any #includes from the ErrorDocument catching
> the Nimda requests  (e.g. 404)
>
> I pretty sure this has to to with the malformed Host HTTP header that
> comes in with some of the Nimda requests. I remember awhile
> ago when fiddling with the Host header apache went crashing
> occationally. I didn't pay much attention to it then, but it makes sense
> now.
>
> ---
> GET /scripts/root.exe?/c+dir HTTP/1.0
> Connection: close
> Host: www
>  ---



Mime
View raw message