You are viewing a plain text version of this content. The canonical link for it is here.

Posted to bugs@httpd.apache.org by bu...@apache.org on 2003/01/25 22:42:55 UTC

DO NOT REPLY [Bug 16423] - TRACE vulnerability

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=16423>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=16423

TRACE vulnerability

slive@apache.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID



------- Additional Comments From slive@apache.org  2003-01-25 21:42 -------
This is not a bug in apache; it is a browser problem.  You should probably
read the entire thread on bugtraq:
http://marc.theaimsgroup.com/?t=104326484700001&r=1&w=2

There is a slight inconvenience caused by the fact that you can't <Limit TRACE>
in Apache, but there is no bug.

Thanks for using Apache.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org