|
|
Info |
Last Modified |
| 2 months ago |
|
|
|
|
Description |
Apache Tomcat contains a flaw that may allow a remote denial of service. The issue is triggered when an attacker makes multiple concurrent requests for a directory listing that contain a large number of files. With a large number of requests, an attacker can cause the server to stop processing subsequent requests.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Available
OSVDB:
Web Related
|
|
Technical |
Successful exploitation requires that directory listing is enabled in a directory with a large number of files.
|
|
Solution |
Upgrade to version 5.5.12 or higher, as it has been reported to partially fix this vulnerability by allowing operations to resume after a few minutes. It is also possible to correct the flaw by implementing the following workaround(s):
-Disable directory listing for web directories that has a large number of files.
|
|
Products |
|
Apache Tomcat
 |
5.5.11 |
5.5.12 |
|
|
|
|
Credit |
- David Maciejak - david.maciejak
 kyxar.fr -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
