6322443 

NSFC buffer size should be configurable (64-Bit). 

Additional Information: Use the new BufferSize nsfc.conf directive to configure the size of the buffer used to transmit file contents on cache misses. The following directive can be added to nsfc.conf to increase the buffer size from its default of 8192 bytes to 16384 bytes: BufferSize=16384

Larger buffer sizes may result in improved throughput at the cost of increased latency and memory utilization. 

6234284 

JES3 Web Server installation fails and/or core dumps if the Admin password contain shell meta-characters such as ;, $, &, ^, *. (. ), |, <, >, ', `,”, and \, etc in Admin password. 

6232465 

Include -N linker option for HPUX Web Server builds. 

6171389 

Input filter is called only for the first HTTP request when using Keep-Alive. All subsequent requests of the TCP connection are not being processed by the filter. 

6195820 

Global resources are not available to load-on-startup servlets. 

5042600 

Unable to migrate 6.0 SP7 Web Server instance to 6.1 SP2. 

6244615 

Web Server migration should correctly update RootCerts. 

6219618 

JES Web Server 6.1 SP2 failed to index PDF version 1.5 (Acrobat 6.x) doc for Search Collection Creation. 

6239342 

Cross-site scripting vulnerability in a default error page. 

4879994 

SSL: Data larger than 8k is lot when the request triggers new SSL handshake. 

Additional Information: By default Web Server can upload file of size up to 1MB (when client cert authentication is optional). To upload file larger than 1MB, increase the SSLClientAuthDataLimit limit in the magnus.conf file. In case of simultaneous uploading of very large files Web Server will use large chunk of memory. To minimize memory utilization do any of the followings:

• If authentication is not required, turn off the authentication.

• If authentication is required, make it mandatory by setting require=1 in the obj.conf.

PathCheck fn="get-client-cert" dorequest="1" require="1"

6229472 

.htaccess Require directive broken. 

6170938 

acceptlanguage does not work for User Document Directories. 

6180991 

Internal-Daemon Log Rotation does not work for files greater than 2GB. 

6254121 

.htaccess silently fails to protect resources which do not have a corresponding file. 

6185904 

New NSS error codes are not being handled properly (unknown error – 8048). 

6262885 

Switching from HTTPS to HTTP causes generation of new session. 

Additional Information: Set the isSecure attribute of the session cookie for the Web application under cookie-properties to either true or false in the webapp's sun-web.xml. The default value is true. In the following example, isSecure is set to false for the web-app by setting the parameter value to false. The sun-web.xml will look like:

<session-config>
         <cookie-properties>
           <property name="isSecure" value="false"/>
         </cookie-properties>
      </session-config>

6222728 

SNMP services fail in Web Server 6.1 SP2/SP3 on Windows 2000 platform. 

6273472 

Web Server 6.1 SP4 uninstall script displays an error message – `No such file or directory'. 

6259257 

Some PDF files fail to be indexed by the search engine. 

6253489 

ClassCastException thrown when nested includes are present in JSPs. 

6285847 

Requests with double `Content-Length' header should get rejected (HRS vulnerability). 

Workaround: Add the StrictHttpHeaders directive in magnus.conf and set its value to on.

6275413 

Incorrectly configured home-page SAF crashes server.