CVE-2011-3368 suggested patch incomplete for apache2 < 2.2.18

[Marcus Meissner <meissner () suse de>]

Hi,

during our QA we noticed that the mod_proxy fix for CVE-2011-3368
was incomplete for HTTP 0.9 style requests. 

https://bugzilla.novell.com/show_bug.cgi?id=722545

to cross check, with the RewriteRules setup as in the exploit:

$ telnet testhost 80
GET @www.otherhost/foo.png
... should give a 400 error, and not the 404 code from www.otherhost

Ciao, Marcus