invalid http headers?

[gpythomas]

I recently attempted to reinstall arborator (commit a16f3a3) on a new server which runs Ubuntu 16.04 and apache2 (2.4.18). When trying to access arborator in firefox, I get a 500 internal server error. I can run other CGI scripts from the directory where arborator is installed (/var/www/html/), so the problem is specific to my arborator installation. Apache2's error log reads:

[http:error] ... AH02429: Response header name '<!--' contains invalid characters ....

These posts suggest there might be an issue with a cgi script that outputs an invalid http header:

https://serverfault.com/questions/853103/500-internal-server-ah02429-response-header-name
https://blog.tigertech.net/posts/apache-cve-2016-8743/

I haven't been able to find the issue in arborator's cgi scripts. I wonder if there is indeed an issue with these scripts or if my server is not properly configured.

[marinecourtin]

Hi @gpythomas , could you print out the invalid http header and the name of the script you were trying to execute ?