wok-next diff apache/stuff/fix-range-CVE-2011-3192.conf @ rev 14602

xorg-libXxf86vm: down 1.1.2 (ver. 1.1.3 yet not exists here)
author Aleksej Bobylev <al.bobylev@gmail.com>
date Wed May 29 02:19:36 2013 +0000 (2013-05-29)
parents
children
line diff
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/apache/stuff/fix-range-CVE-2011-3192.conf	Wed May 29 02:19:36 2013 +0000
     1.3 @@ -0,0 +1,8 @@
     1.4 +# From http://thread.gmane.org/gmane.comp.apache.announce/58
     1.5 +# Drop the Range header when more than 5 ranges.
     1.6 +# CVE-2011-3192
     1.7 +SetEnvIf Range (,.*?){5,} bad-range=1
     1.8 +RequestHeader unset Range env=bad-range
     1.9 +
    1.10 +# optional logging.
    1.11 +#CustomLog logs/range-CVE-2011-3192.log common env=bad-range