Apache Web Server Chunk Handling

[abovebrd]

How do I test for the Apache Web Server Chunk Handling vulnerability ?

-Danny
dan@snoboarder.net

 

[noodler]

I do not know how to test the server for chunk handling vulnerability but I was wondering if you had installed the security patch yet:

http://www.apache.org/dist/httpd/patches/apply_to_1.3.22/SECURITY_chunk_size_patch.txt

I am new to this game and was wondering if the code in the patch is copied somewhere into the httpd.conf file?

thanks,

Noodler

 

[sleipnir214]

No, the patch edits the Apache source code. Once you have applied the patch, you must recompile Apache. ______________________________________________________________________
My God! It's full of stars!
______________________________________________________________________

 

[abovebrd]

this is what I was looking for

http://www.eeye.com/html/Research/Tools/apachechunked.html

-Danny
dan@snoboarder.net