apache 1.3.34 security fix question

In the change log for apache 1.3.34 it states:

SECURITY: core: If a request contains both Transfer-Encoding and
Content-Length headers, remove the Content-Length, mitigating some
HTTP Request Splitting/Spoofing attacks. This has no impact on
mod_proxy_http, yet affects any module which supports chunked
encoding yet fails to prefer T-E: chunked over the Content-Length
purported value. [Paul Querna, Joe Orton]

From all of my research I can't tell if this fix really is only needed
when 1.3.x is being used as a proxy server or if it also takes care of
security problems when 1.3.x is being used as an endpoint.

Does anyone have an authoritative answer to this?

Thanks,

Jeff Long