Apache: DoS with mod_deflate & range requests, tomcat also? [migrated]
- by VextoR
I know that apache has a security bug http://seclists.org/fulldisclosure/2011/Aug/175
So if you do this command:
curl -I -H "Range: bytes=0-1,0-2" -s www.yandex.ru/robots.txt
it says
HTTP/1.1 206 Partial Content
it means, the problem is exist.
But the fact is, that for apache tomcat (our server) curl says 206 Partial Content as well.
So we need to fix it. I found solution for apache HTTP (.htaccess, mod_headers) but not for tomcat.
I'm very newbie for servers things, so can't understand most, so please help