PH21717: RELAX HOSTNAME VALIDATION IN IBM HTTP SERVER

APAR status

• Closed as program error.

Error description

• The user gets an error 400 Bad Request in the browser and in the
  IBM Http Server access.log when trying to use ErrorDocument to
  handle a request.
  
  This occurred after upgrading from 8.5.5.10 to 8.5.5.13
  
  In the IBM Http Server error.log, the following error messages
  are displayed:
  
  Invalid host name
  Client sent malformed Host header
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM HTTP Server                *
  ****************************************************************
  * PROBLEM DESCRIPTION: IHS returns a HTTP 400 error for        *
  *                      hostnames where the final component     *
  *                      of the domain begins with a digit.      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  IHS reports "Client sent malformed Host header" when the
  requested URL ends with a segment beginning with a digit, such
  as example.com.3d
  

Problem conclusion

• The code was updated to allow these non-conforming domains.
  
  The fix for this APAR is targeted for inclusion in IBM HTTP
  Server fix packs 8.5.5.18 and 9.0.5.4.  For more information,
  see 'Recommended Updates for WebSphere Application Server':
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM HTTP SERVER

• Fixed component ID

  5724J0801

Applicable component levels