Description
The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://tomcat.apache.org/security-4.html ↗
- http://secunia.com/advisories/30908 ↗
- http://www.securityfocus.com/bid/8824 ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 ↗
- http://secunia.com/advisories/30899 ↗
- http://www.vupen.com/english/advisories/2008/1979/references ↗
- http://www.debian.org/security/2003/dsa-395 ↗
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=215506 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13429 ↗
- https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E ↗
- https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E ↗
- https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E ↗