Apache Tomcat Non-HTTP Request Denial Of Service Vulnerability
BID:8824
Info
Apache Tomcat Non-HTTP Request Denial Of Service Vulnerability
| Bugtraq ID: | 8824 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2003-0866 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 15 2003 12:00AM |
| Updated: | Sep 05 2008 06:41PM |
| Credit: | Discovery of this vulnerability has been credited to Aldrin Martoq. |
| Vulnerable: |
Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 9 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun Solaris 10 Apache Tomcat 4.0.6 Apache Tomcat 4.0.5 Apache Tomcat 4.0.4 Apache Tomcat 4.0.3 Apache Tomcat 4.0.2 Apache Tomcat 4.0.1 Apache Tomcat 4.0 |
| Not Vulnerable: |
Apache Tomcat 4.1.24 |
Discussion
Apache Tomcat Non-HTTP Request Denial Of Service Vulnerability
Apache Tomcat 4 has been reported prone to a remotely triggered denial-of-service vulnerability when handling undisclosed non-HTTP request types.
When certain non-HTTP request types are handled by the Tomcat HTTP connector, the Tomcat server will reject subsequent requests on the affected port until the service is restarted.
Apache Tomcat 4 has been reported prone to a remotely triggered denial-of-service vulnerability when handling undisclosed non-HTTP request types.
When certain non-HTTP request types are handled by the Tomcat HTTP connector, the Tomcat server will reject subsequent requests on the affected port until the service is restarted.
Exploit / POC
Solution / Fix
Apache Tomcat Non-HTTP Request Denial Of Service Vulnerability
Solution:
Fixes are available. Please see the references for details.
Sun Solaris 9
Sun Solaris 9_x86
Solution:
Fixes are available. Please see the references for details.
Sun Solaris 9
-
Sun 113146-11
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113146-11-1 -
Sun 114016-02
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -114016-02-1
Sun Solaris 9_x86