>Number: 813 >Category: mod_proxy >Synopsis: More than one Host: headers may be sent to server >Confidential: no >Severity: non-critical >Priority: medium >Responsible: apache (Apache HTTP Project) >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Tue Jul 1 18:30:01 1997 >Originator: [EMAIL PROTECTED] >Organization: apache >Release: Apache/1.2.0 >Environment: FreeBSD 2.2.1-RELEASE >Description: In line 263 of proxy_http.c, proxy_http_handler() checks if "Host:" header is there, but the header comparison should be case insensitive. >How-To-Repeat: I don't know any client which sends like "hOsT:" >Fix: use strcasecmp() instead of strcmp(%2 >Audit-Trail: >Unformatted:
