Bug 43192 - %5C produces Internal Server Error
Summary: %5C produces Internal Server Error
Status: RESOLVED DUPLICATE of bug 35256
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: Core (show other bugs)
Version: 2.2.4
Hardware: PC Windows XP
: P2 normal (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-08-22 22:49 UTC by yoshiaki tanaka
Modified: 2018-02-25 21:08 UTC (History)
0 users



Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description yoshiaki tanaka 2007-08-22 22:49:21 UTC
I set AllowEncodedSlashes to "On"
If the url requested to my cgi contains %5C, then my apache server returns 
internal server error.

url example:
"http://myserver/cgi-bin/my.cgi/%83%65%83%58%83%67%95%5C.txt"

logs/error.log
(22)Invalid argument: couldn't create child process: 22: my.cgi, referer: 
http://myserver/cgi-bin/my.cgi
Comment 1 rahul 2007-09-11 01:58:25 UTC
Could not reproduce it in Head (2.3)
Steps used:
   As mentioned in bug report
---------------------------
AllowEncodedSlashes On
# /space/store/httpd is the root.
ScriptAlias /cgi-bin/ "/space/store/httpd/cgi-bin/"
---------------------------
>[
GET http://agneyam.india.sun.com:8080/cgi-bin/printenv/myfile%5C.txt HTTP/1.0

]

<[
HTTP/1.1 200 OK
Date: Tue, 11 Sep 2007 08:47:50 GMT
Server: Apache/2.3.0-dev (Unix)
Connection: close
Content-Type: text/plain; charset=iso-8859-1

DOCUMENT_ROOT="/space/store/httpd/htdocs"
GATEWAY_INTERFACE="CGI/1.1"
PATH="."
PATH_INFO="/myfile\.txt"
PATH_TRANSLATED="/space/store/httpd/htdocs/myfile\.txt"
QUERY_STRING=""
REMOTE_ADDR="129.158.224.63"
REMOTE_PORT="34215"
REQUEST_METHOD="GET"
REQUEST_URI="http://agneyam.india.sun.com:8080/cgi-bin/printenv/myfile%5C.txt"
SCRIPT_FILENAME="/space/store/httpd/cgi-bin/printenv"
SCRIPT_NAME="/cgi-bin/printenv"
SERVER_ADDR="129.158.224.203"
SERVER_ADMIN="you@example.com"
SERVER_NAME="agneyam.india.sun.com"
SERVER_PORT="8080"
SERVER_PROTOCOL="HTTP/1.0"
SERVER_SIGNATURE=""
SERVER_SOFTWARE="Apache/2.3.0-dev (Unix)"
TZ="Asia/Calcutta"

Please do provide more information on how the bug can be reproduced.

Comment 2 Nick Kew 2007-09-13 06:54:11 UTC
This'll be because it's incorrectly decoded, and so passes junk to the operating
system.  Fixing 35256 will fix this.

*** This bug has been marked as a duplicate of 35256 ***
Comment 3 Rainer Jung 2018-02-25 21:08:08 UTC
Undo spam change

*** This bug has been marked as a duplicate of bug 35256 ***