Re: config/8692: Wrong error generated for nimdA attack while using SetEnvIf, CustomLog, and ErrorDocument directives

[jw...@apache.org]

[In order for any reply to be added to the PR database, you need]
[to include <ap...@Apache.Org> in the Cc line and make sure the]
[subject line starts with the report component and number, with ]
[or without any 'Re:' prefixes (such as "general/1098:" or      ]
["Re: general/1098:").  If the subject doesn't match this       ]
[pattern, your message will be misfiled and ignored.  The       ]
["apbugs" address is not added to the Cc line of messages from  ]
[the database automatically because of the potential for mail   ]
[loops.  If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request from a  ]
[developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]


Synopsis: Wrong error generated for nimdA attack while using SetEnvIf, CustomLog, and ErrorDocument directives

State-Changed-From-To: open-closed
State-Changed-By: jwoolley
State-Changed-When: Tue Nov  6 15:35:04 PST 2001
State-Changed-Why:
Please see PR8625.  The 404's and 400's are not incorrect. These worms are deliberately sending requests designed to foul up request processing.  Some really are bad requests, so 400 is the correct response; similar issues apply with 404.
Class-Changed-From-To: sw-bug-mistaken
Class-Changed-By: jwoolley
Class-Changed-When: Tue Nov  6 15:35:04 PST 2001
Category-Changed-From-To: general-config
Category-Changed-By: jwoolley
Category-Changed-When: Tue Nov  6 15:35:04 PST 2001