Bug 162244

Summary:	CAN-2005-2088 httpd proxy request smuggling
Product:	Red Hat Enterprise Linux 4	Reporter:	Josh Bressers <bressers>
Component:	httpd	Assignee:	Joe Orton <jorton>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4.0	CC:	eric.eisenhart, furi
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	public=20050612,impact=moderate
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-07-25 07:50:21 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2005-07-01 13:36:10 UTC

When using apache as a proxy, it is vulnerable to request smuggling.

(taken from bugtraq)
http://seclists.org/lists/bugtraq/2005/Jun/0025.html

> "We describe a new web entity attack technique ï¿½ ï¿½HTTP Request
> Smugglingï¿½. The attack technique and the derived attacks are relevant
> to most web environments and is the result of a HTTP server or
> deviceï¿½s failure to properly handle malformed inbound HTTP requests.
> HTTP Request Smuggling works by taking advantage of the discrepancies
> in parsing when one or more HTTP devices/entities (e.g. Cache Server,
> Proxy Server, Web Application Firewall, etc.) are in the data flow
> between the user and the web server. HTTP Request Smuggling enables
> various attacks ï¿½ web cache poisoning, session hijacking, cross-site
> scripting and most serious the ability to bypass web application
> firewall protection.

http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf

Comment 1 Josh Bressers 2005-07-01 13:37:08 UTC

This issue also affects RHEL3

Comment 5 Mark J. Cox 2005-07-25 07:50:21 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2005-582.html