Mailinglist Archive: opensuse-bugs (14787 mails)
| < Previous | Next > |
[Bug 224956] New: apache2: ErrorDocument in /cgi-bin
- From: bugzilla_noreply@xxxxxxxxxx
- Date: Thu, 30 Nov 2006 09:54:09 -0700 (MST)
- Message-id: <bug-224956-21960@xxxxxxxxxxxxxxxxxxxxxxxxx/>
https://bugzilla.novell.com/show_bug.cgi?id=224956
Summary: apache2: ErrorDocument in /cgi-bin
Product: SUSE Linux 10.1
Version: Final
Platform: Other
OS/Version: SuSE Linux 10.1
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Network
AssignedTo: bnc-team-screening@xxxxxxxxxxxxxxxxxxxxxx
ReportedBy: guido@xxxxxxxxxxx
QAContact: qa@xxxxxxx
Internal server errors in cgi scripts are not handled correctly in a vanilla
apache installation. There is something wrong with the ErrorDocument
directive.
To reproduce: Install the apache2-2.2.0-21.7 rpm, start apache with the default
configuration and then "cat /dev/null >/srv/www/cgi-bin/broken.sh". Then
access the URL http://localhost/cgi-bin/broken.pl.
The error page (see below) in the response is of Content-Type
application/x-shellscript instead of text/html, and consequently most browsers
will offer to download the page instead of displaying it inline. Apart from
that, the error page also says "Additionally, a 500 Internal Server Error
error was encountered while trying to use an ErrorDocument to handle the
request." As a consequence, the visitor of the broken URI never seens an error
message.
# telnet localhost 80
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
GET /cgi-bin/broken.sh HTTP/1.1
Host: localhost
Connection: close
HTTP/1.1 500 Internal Server Error
Date: Thu, 30 Nov 2006 16:49:44 GMT
Server: Apache/2.2.0 (Linux/SUSE)
Content-Length: 0
Connection: close
Content-Type: application/x-shellscript
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>500 Internal Server Error</title>
</head><body>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator,
webmaster@xxxxxxxxxxx and inform them of the time the error occurred,
and anything you might have done that may have
caused the error.</p>
<p>More information about this error may be available
in the server error log.</p>
<p>Additionally, a 500 Internal Server Error
error was encountered while trying to use an ErrorDocument to handle the
request.</p>
<hr>
<address>Apache/2.2.0 (Linux/SUSE) Server at localhost Port 80</address>
</body></html>
Connection closed by foreign host.
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
Summary: apache2: ErrorDocument in /cgi-bin
Product: SUSE Linux 10.1
Version: Final
Platform: Other
OS/Version: SuSE Linux 10.1
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Network
AssignedTo: bnc-team-screening@xxxxxxxxxxxxxxxxxxxxxx
ReportedBy: guido@xxxxxxxxxxx
QAContact: qa@xxxxxxx
Internal server errors in cgi scripts are not handled correctly in a vanilla
apache installation. There is something wrong with the ErrorDocument
directive.
To reproduce: Install the apache2-2.2.0-21.7 rpm, start apache with the default
configuration and then "cat /dev/null >/srv/www/cgi-bin/broken.sh". Then
access the URL http://localhost/cgi-bin/broken.pl.
The error page (see below) in the response is of Content-Type
application/x-shellscript instead of text/html, and consequently most browsers
will offer to download the page instead of displaying it inline. Apart from
that, the error page also says "Additionally, a 500 Internal Server Error
error was encountered while trying to use an ErrorDocument to handle the
request." As a consequence, the visitor of the broken URI never seens an error
message.
# telnet localhost 80
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
GET /cgi-bin/broken.sh HTTP/1.1
Host: localhost
Connection: close
HTTP/1.1 500 Internal Server Error
Date: Thu, 30 Nov 2006 16:49:44 GMT
Server: Apache/2.2.0 (Linux/SUSE)
Content-Length: 0
Connection: close
Content-Type: application/x-shellscript
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>500 Internal Server Error</title>
</head><body>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator,
webmaster@xxxxxxxxxxx and inform them of the time the error occurred,
and anything you might have done that may have
caused the error.</p>
<p>More information about this error may be available
in the server error log.</p>
<p>Additionally, a 500 Internal Server Error
error was encountered while trying to use an ErrorDocument to handle the
request.</p>
<hr>
<address>Apache/2.2.0 (Linux/SUSE) Server at localhost Port 80</address>
</body></html>
Connection closed by foreign host.
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
| < Previous | Next > |