Apache Tomcat Denial of Service vulnerability in the Catalina package
The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.6 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2003-0866US | medium5.0 | Exploit | ||
The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the… | ||||
02
references
External citations — patches, advisories, analysis.
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=215506WEB
- http://secunia.com/advisories/30899WEB
- http://secunia.com/advisories/30908WEB
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1WEB
- http://tomcat.apache.org/security-4.htmlWEB
- http://www.debian.org/security/2003/dsa-395WEB
- http://www.securityfocus.com/bid/8824WEB
- http://www.vupen.com/english/advisories/2008/1979/referencesWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan