CVE-2008-5519

Currently unrated

Key Information:

Vendor
Apache
Status
Mod Jk
Vendor
CVE Published:
9 April 2009

Summary

The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.

References

http://www.vupen.com/english/advisories/2009/0973
vdb-entryx_refsource_VUPEN
http://tomcat.apache.org/connectors-doc/miscellaneous/cha...
x_refsource_CONFIRM
http://secunia.com/advisories/34621
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.