Vulnerability Development mailing list archives

Re: apache chunked encoding

From: Marc Slemko <marcs () znep com>
Date: Fri, 21 Jun 2002 08:53:54 -0700 (PDT)

On Thu, 20 Jun 2002, Tina Bird wrote:

And I don't suppose anyone knows where the configuration "switch" is that
disables support for chunked encoding in the default version of Apache?  I
RTFM'ed but couldn't find it.


There is none.

There are no configuration directives in the Apache distribution
that will protect against this.

Certain pages will not be exploitable if they are not handled by the
default handler, but that is a different issue.

Current thread:

apache chunked encoding Przemyslaw Frasunek (Jun 19)
- Re: apache chunked encoding Edwin Groothuis (Jun 19)
- Re: apache chunked encoding David Bernick (Jun 20)
- <Possible follow-ups>
- Re: Re: apache chunked encoding cc (Jun 20)
- RE: apache chunked encoding Horner, Jonathan J. (JH8) (Jun 20)
  - Re: apache chunked encoding David Bernick (Jun 20)
    - Re: apache chunked encoding Tina Bird (Jun 20)
    - Re: apache chunked encoding Marc Slemko (Jun 21)
    - Re: apache chunked encoding Tina Bird (Jun 21)