QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-5519

Back to search

CVE-2008-5519

Published: Apr 9, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2009-0973
vdb-entry
x_refsource_VUPEN
34621
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2009:018
vendor-advisory
x_refsource_SUSE
1022001
vdb-entry
x_refsource_SECTRACK
34412
vdb-entry
x_refsource_BID
RHSA-2009:0446
vendor-advisory
x_refsource_REDHAT
29283
third-party-advisory
x_refsource_SECUNIA
35537
third-party-advisory
x_refsource_SECUNIA
DSA-1810
vendor-advisory
x_refsource_DEBIAN
262468
vendor-advisory
x_refsource_SUNALERT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now