This host is running Apache Tomcat and is prone to remote denial of service vulnerability.

Successful exploitation will allow remote attackers to cause a denial of service (thread consumption) by using a 'Content-Length: 0' AJP request to trigger a hang in request processing. Impact Level: Application

Upgrade to version 8.0.4 or later. For updates refer to refer http://tomcat.apache.org

The flaw is due to an error in java/org/apache/coyote/ajp/AbstractAjpProcessor.java

Apache Tomcat 8.x before 8.0.4

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://secunia.com/advisories/59732
• http://tomcat.apache.org/security-8.html
• http://www-01.ibm.com/support/docview.wss?uid=swg21678231

---

Updated on 2015-03-25