#http request injection for apache chunked handling vulnerability(DoS,remote exploitable) # #Affected Apache Version 1.3.X: Apache < 1.3.26 # Apache Version 2.X : Apache < 2.0.39 # # #more information #http://httpd.apache.org/info/security_bulletin_20020620.txt # #NOTE: #if server exist a apache chunked bug, apache.uxe doesn't display anything. #if server doesn't exist a apache chunked, apache.uxe display 'doesn't affect' message #this rule only for Apache Webserver. IIS doesn't affected this bug. # #rule by pilot # 400-> POST :/check.html HTTP/1.1\r\nHost: 192.168.1.1\r\nTransfer-Encoding: chunked\r\n\r\naaaaaaaaaaaa\r\n\r\n^this server Apache chunk Vulnerability doesn't affect;;