- 536 名前：名無しさん＠お腹いっぱい。 mailto:sage [2011/08/25(木) 21:34:02.90 ]
- CVE-2011-3192
Range header DoS vulnerability Apache HTTPD 1.3/2.x
1) Use SetEnvIf or mod_rewrite to detect a large number of ranges and then
either ignore the Range: header or reject the request.
Option 1: (Apache 2.0 and 2.2)
# Drop the Range header when more than 5 ranges.
# CVE-2011-3192
SetEnvIf Range (,.*?){5,} bad-range=1
RequestHeader unset Range env=bad-range
# optional logging.
CustomLog logs/range-CVE-2011-3192.log common env=bad-range
対策してね。
|
 |
