>Number: 5507
>Category: test
>Synopsis: Incorrect environment variable name pass from CGI, that makes
>executing test-cgi and printenv not properly.
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: apache
>State: open
>Class: sw-bug
>Submitter-Id: apache
>Arrival-Date: Sat Dec 25 02:40:00 PST 1999
>Last-Modified:
>Originator: [EMAIL PROTECTED]
>Organization:
apache
>Release: 1.3.9
>Environment:
Linux Mandrake 6.0
Kernel 2.2.9-19
>Description:
In executing /cgi/bin/test-cgi, i get the following result:
CGI/1.0 test script report:
argc is 0. argv is .
SERVER_SOFTWARE =
SERVER_NAME =
GATEWAY_INTERFACE =
SERVER_PROTOCOL =
SERVER_PORT =
REQUEST_METHOD =
HTTP_ACCEPT =
PATH_INFO =
PATH_TRANSLATED =
SCRIPT_NAME =
QUERY_STRING =
REMOTE_HOST =
REMOTE_ADDR =
REMOTE_USER =
AUTH_TYPE =
CONTENT_TYPE =
CONTENT_LENGTH =
In executing /cgi/bin/test-cgi, i get the following result:
________________ =
Apache/1.3.9 Server at localhost.localdomain Port 80
_______________ = HTTP/1.0
______________ = GET
_____________ = /usr/local/apache/htdocs
____________ =
___________ = /cgi-bin/printenv
_________ = OGSf038AAAEAAAJUFmA
____________________ = en
____ = /sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin:/usr/local/apache/bin
___________________ = iso-8859-1,*,utf-8
_________________ = CGI/1.1
It seems the environment variable name is incorrect. From the above observation,
REQUEST_METHOD is replaced as ______________, and I can only get the value in
Perl by $ENV{______________} instead of $ENV(REQUEST METHOD).
>How-To-Repeat:
Sorry, I just run the apache locally.
>Fix:
No idea.
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, you need]
[to include <[EMAIL PROTECTED]> in the Cc line and make sure the]
[subject line starts with the report component and number, with ]
[or without any 'Re:' prefixes (such as "general/1098:" or ]
["Re: general/1098:"). If the subject doesn't match this ]
[pattern, your message will be misfiled and ignored. The ]
["apbugs" address is not added to the Cc line of messages from ]
[the database automatically because of the potential for mail ]
[loops. If you do not include this Cc, your reply may be ig- ]
[nored unless you are responding to an explicit request from a ]
[developer. Reply only with text; DO NOT SEND ATTACHMENTS! ]
