[9006] in bugtraq

home help back first fref pref prev next nref lref last post

Re: HTTP REQUEST_METHOD flaw

daemon@ATHENA.MIT.EDU (Ben Laurie)
Sat Jan 9 14:33:42 1999

Date: 	Fri, 8 Jan 1999 20:14:37 +0000
Reply-To: Ben Laurie <ben@ALGROUP.CO.UK>
From: Ben Laurie <ben@ALGROUP.CO.UK>
X-To:         Christopher Masto <chris@NETMONGER.NET>
To: BUGTRAQ@NETSPACE.ORG

Christopher Masto wrote:
> Sending a null, by the way, results in this interesting effect:
>
> 209.54.21.199 - - [07/Jan/1999:14:35:27 -0500] "=FF=F4=FF=FD" 501 - "=
-" "-"
>
> (Perhaps that will be mutilated by non 8-bit mail transport.. it's th=
e
> four characters ff f4 ff fd)

Not. That's you somehow inducing your telnet client to try to do some
negotiation. Naturally, Apache doesn't do telnet negotiation.

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

"My grandfather once told me that there are two kinds of people: those
who work and those who take the credit. He told me to try to be in the
first group; there was less competition there."
     - Indira Gandhi

home help back first fref pref prev next nref lref last post