[9006] in bugtraq
Re: HTTP REQUEST_METHOD flaw
daemon@ATHENA.MIT.EDU (Ben Laurie)
Sat Jan 9 14:33:42 1999
Date: Fri, 8 Jan 1999 20:14:37 +0000
Reply-To: Ben Laurie <ben@ALGROUP.CO.UK>
From: Ben Laurie <ben@ALGROUP.CO.UK>
X-To: Christopher Masto <chris@NETMONGER.NET>
To: BUGTRAQ@NETSPACE.ORG
Christopher Masto wrote:
> Sending a null, by the way, results in this interesting effect:
>
> 209.54.21.199 - - [07/Jan/1999:14:35:27 -0500] "=FF=F4=FF=FD" 501 - "=
-" "-"
>
> (Perhaps that will be mutilated by non 8-bit mail transport.. it's th=
e
> four characters ff f4 ff fd)
Not. That's you somehow inducing your telnet client to try to do some
negotiation. Naturally, Apache doesn't do telnet negotiation.
Cheers,
Ben.
--
http://www.apache-ssl.org/ben.html
"My grandfather once told me that there are two kinds of people: those
who work and those who take the credit. He told me to try to be in the
first group; there was less competition there."
- Indira Gandhi
