DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=26233>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=26233

Server Crashed By Odd Query String

           Summary: Server Crashed By Odd Query String
           Product: Apache httpd-2.0
           Version: 2.0.48
          Platform: PC
               URL: http://laurel.versaqual.com
        OS/Version: Linux
            Status: NEW
          Severity: Critical
          Priority: Other
         Component: Core
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


It seems one of the following query strings may have brought httpd down (from
access_log):

24.128.99.184 - - [18/Jan/2004:02:14:34 -0500] "GET
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
HTTP/1.0" 404 297 "-" "-"
24.128.99.184 - - [18/Jan/2004:02:45:49 -0500] "GET
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
HTTP/1.0" 404 297 "-" "-"
24.128.99.184 - - [18/Jan/2004:02:59:58 -0500] "GET
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
HTTP/1.0" 404 297 "-" "-"
24.128.99.184 - - [18/Jan/2004:03:02:02 -0500] "GET
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
HTTP/1.0" 404 297 "-" "-"
192.168.0.100 - - [18/Jan/2004:04:00:35 -0500] "OPTIONS / HTTP/1.1" 200 584 "-"
"Microsoft-WebDAV-MiniRedir/5.1.2600"
192.168.0.100 - - [18/Jan/2004:04:00:35 -0500] "PROPFIND /corey HTTP/1.1" 405
319 "-" "Microsoft-WebDAV-MiniRedir/5.1.2600"

These were the last 6 requests before the error_log displayed the following:

[Sun Jan 18 02:14:34 2004] [error] [client 24.128.99.184] File does not exist:
/var/www/html/default.ida
[Sun Jan 18 02:45:49 2004] [error] [client 24.128.99.184] File does not exist:
/var/www/html/default.ida
[Sun Jan 18 02:59:58 2004] [error] [client 24.128.99.184] File does not exist:
/var/www/html/default.ida
[Sun Jan 18 03:02:02 2004] [error] [client 24.128.99.184] File does not exist:
/var/www/html/default.ida
[Sun Jan 18 04:12:11 2004] [notice] SIGHUP received.  Attempting to restart
[Sun Jan 18 04:12:11 2004] [notice] seg fault or similar nasty error detected in
the parent process

It seems I've been DOSd. Though I'm not sure what is at fault here. My OS is
Fedora Core 1.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to