On Monday 28 January 2008 21:09:31 Mark Thomas wrote: > Michal Vyskocil wrote: > > I'm unable to locate a patch to fix the CVE-2005-2090. I cannot found any > > hint from svn commit log or bugzilla. > > > > Maybe is this commit > > ------------------------------------------------------------------------ > > r513079 | markt | 2007-03-01 01:26:12 +0100 (Čt, 01 bře 2007) | 1 line > > > > As per RFC2616, requests with multiple content-length headers are > > invalid. > > Yep, that's it. > > Mark
Thanks for your help, Mark. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]