You are viewing a plain text version of this content. The canonical link for it is here.
Posted to apache-bugdb@apache.org by Michael Cramer <mc...@pbs.org> on 2000/02/29 01:03:01 UTC

general/5819: Host: header field with an underscore fails with "Client sent malformed Host header"

>Number:         5819
>Category:       general
>Synopsis:       Host: header field with an underscore fails with "Client sent malformed Host header"
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Mon Feb 28 16:10:00 PST 2000
>Closed-Date:
>Last-Modified:
>Originator:     mcramer@pbs.org
>Release:        1.3.12
>Organization:
apache
>Environment:
Solaris 2.6, gcc, SunOS nfs 5.6 Generic_105181-16 sun4u sparc SUNW,Ultra-4
>Description:
The error checking of the Host: header which was added in 1.3.10 breaks requests
that refer to hostnames containing an underscore. This was first reported in 
PR#5722 regarding Virtual Hosts, but it appears that it happens in servers which
do not use virtual hosts at all.
>How-To-Repeat:
In your /etc/hosts file, add an alias for your webserver's IP, using 
telnet to a 1.3.10 or newer server on port 80 and give the following:
GET / HTTP/1.1
Host: blah_zing
>Fix:
It looks like the problem is in the fix_hostname function in main/http_vhost.c.
>Release-Note:
>Audit-Trail:
>Unformatted:
 [In order for any reply to be added to the PR database, you need]
 [to include <ap...@Apache.Org> in the Cc line and make sure the]
 [subject line starts with the report component and number, with ]
 [or without any 'Re:' prefixes (such as "general/1098:" or      ]
 ["Re: general/1098:").  If the subject doesn't match this       ]
 [pattern, your message will be misfiled and ignored.  The       ]
 ["apbugs" address is not added to the Cc line of messages from  ]
 [the database automatically because of the potential for mail   ]
 [loops.  If you do not include this Cc, your reply may be ig-   ]
 [nored unless you are responding to an explicit request from a  ]
 [developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]