From nobody@hyperreal.com  Sun Apr 13 13:02:22 1997
Received: (from nobody@localhost)
          by hyperreal.com (8.8.4/8.8.4)
	  id NAA11511; Sun, 13 Apr 1997 13:02:22 -0700 (PDT)
Message-Id: <199704132002.NAA11511@hyperreal.com>
Date: Sun, 13 Apr 1997 13:02:22 -0700 (PDT)
From: Eilebrecht@hyperreal.com, Lars <sfx@unix-ag.org>
Reply-To: sfx@unix-ag.org
To: apbugs@hyperreal.com
Subject: TRACE omits headers
X-Send-Pr-Version: 3.2

>Number:         377
>Category:       protocol
>Synopsis:       TRACE omits headers
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          closed
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Sun Apr 13 13:10:01 1997
>Last-Modified:  Sun Apr 13 17:45:18 PDT 1997
>Originator:     sfx@unix-ag.org
>Organization:
>Release:        1.2b7
>Environment:
all (tested under Linux2)
>Description:
  When Apache is confronted with a request like "TRACE" or
  "TRACE foobar" (followed by carriage returns) he outputs
  that request in the next line _wihtout_ any headers (eg. no
  'Content-Type: message/http').
  Although the two mentioned requests are a little bogus the
  Apache should output a correct header in response to the
  TRACE request or at least a 'Bad Request' response should
  be returned to the client.
>How-To-Repeat:

>Fix:
Two possible solutions (as already mentioned above):
- reply with a correct header including ('Content-Type: message/http')
- reply with a 'Bad Request' messag
>Audit-Trail:
State-Changed-From-To: open-closed
State-Changed-By: dgaudet
State-Changed-When: Sun Apr 13 17:45:18 PDT 1997
State-Changed-Why:
Try "TRACE foobar HTTP/1.1" and "Host: whatever".  Your request
is interpreted using HTTP/0.9 unless you supply a protocol
revision.

Thanks
Dean
>Unformatted: