| Revision Date: | 2015-04-20 | Version: | 28 | | Title: | HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass, Unauthorized Modification and Other Vulnerabilities | | Description: | Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer." | | Family: | unix | Class: | vulnerability | | Status: | ACCEPTED | Reference(s): | CVE-2010-2227
| | Platform(s): | HP-UX 11
| Product(s): | | | Definition Synopsis | | platforms HP-UX B.11.23
OR HP-UX B.11.31
AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.36.01
|
|