unarchive 706076
thanks

On Sun, Jan 11, 2015 at 03:04:35PM -0500, Volker Grabsch wrote:
> This issue is essentially the same as Bug #706076 from Apr 2013:

I don't think so.

>     https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=706076
> 
> Unfortunately, that one was closed prematurely, which is why this bug
> still exists after 1.5 years.  This is really a hassle to system
> administrators, and essentially describes a possible DOS attack
> against AWstats.  Please do take it serious!

I'm unable to reproduce the configuration in which this
happens, sorry.  Either help on this (bug unarchived) or just be polite.

> To reproduce, all you need is a locally running Apache.

I have.

> Then, the
> following command:
> 
>     wget https://localhost:80/
> 
> triggers the following line in Apache's access.log:
> 
>     127.0.0.1 - - [11/Jan/2015:18:48:38 +0000] "\x16\x03" 500 572 "-" "-"

I doesn't, sorry.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to