You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2024/03/26 16:01:58 UTC

[Bug 68833] New: AH02426 & AH00567 should be logged as warning

https://bz.apache.org/bugzilla/show_bug.cgi?id=68833

            Bug ID: 68833
           Summary: AH02426 & AH00567 should be logged as warning
           Product: Apache httpd-2
           Version: 2.5-HEAD
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Core
          Assignee: bugs@httpd.apache.org
          Reporter: marc.stern@approach-cyber.com
  Target Milestone: ---

AH02426 is currently logged at level debug. This forbids detecting attacks
(manually or automatically with mod_security2).
This should be logged at warn level.
Same for AH00567.
Probably others as well.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 68833] AH02426 & AH00567 should be logged as warning

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=68833

Marc Stern <ma...@approach-cyber.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|normal                      |major

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 68833] AH02426, AH00567 & AH10242 should be logged as warning

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=68833

--- Comment #2 from shipwreckcalm <ma...@gmail.com> ---
At the moment, AH02426 is logged at level debug. This prevents the detection of
attacks (either automatically with mod_security2 or manually).
This ought to be recorded at the warning level. https://blockblast-game.io

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 68833] AH02426, AH00567 & AH10242 should be logged as warning

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=68833

--- Comment #1 from Marc Stern <ma...@approach-cyber.com> ---
Same for AH10242

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 68833] AH02426, AH00567 & AH10242 should be logged as warning

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=68833

Marc Stern <ma...@approach-cyber.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|AH02426 & AH00567 should be |AH02426, AH00567 & AH10242
                   |logged as warning           |should be logged as warning

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org