This host is running Apache Tomcat Server and is prone to denial of service vulnerability.

Successful exploitation could allow remote attackers to cause a denial of service condition. Impact Level: Application

Apply patch or upgrade Apache Tomcat to 6.0.36, 7.0.28 or later, For updates refer to http://tomcat.apache.org/ ***** NOTE: Ignore this warning, if above mentioned patch is manually applied. *****

The flaw is due to error in java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector, which does not properly restrict the request-header size.

Apache Tomcat version 6.x to 6.0.35 and 7.x to 7.0.27

• http://secunia.com/advisories/51138
• http://svn.apache.org/viewvc?view=revision&revision=1350301
• http://svn.apache.org/viewvc?view=revision&revision=1356208
• http://tomcat.apache.org/security-6.html
• http://tomcat.apache.org/security-7.html

---

Updated on 2015-03-25