>Number: 377
>Category: protocol
>Synopsis: TRACE omits headers
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: apache (Apache HTTP Project)
>State: open
>Class: sw-bug
>Submitter-Id: apache
>Arrival-Date: Sun Apr 13 13:10:01 1997
>Originator: [EMAIL PROTECTED]
>Organization:
apache
>Release: 1.2b7
>Environment:
all (tested under Linux2)
>Description:
When Apache is confronted with a request like "TRACE" or
"TRACE foobar" (followed by carriage returns) he outputs
that request in the next line _wihtout_ any headers (eg. no
'Content-Type: message/http').
Although the two mentioned requests are a little bogus the
Apache should output a correct header in response to the
TRACE request or at least a 'Bad Request' response should
be returned to the client.
>How-To-Repeat:
>Fix:
Two possible solutions (as already mentioned above):
- reply with a correct header including ('Content-Type: message/http')
- reply with a 'Bad Request' messag
>Audit-Trail:
>Unformatted:
