QwikSec

Security Database

CVE

CWE

Training

CVE-2002-2272

Published: Oct 18, 2007

Modified: Aug 8, 2024

PUBLISHED

Description

Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20021204 Apache/Tomcat Denial Of Service And Information Leakage Vulnerability

mailing-list

x_refsource_BUGTRAQ

tomcat-modjk-get-bo(10771)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.