Description

Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

Remediation

References

CVE-2002-2272

Related Vulnerabilities

ReviveAdserver Session Fixation Vulnerability (CVE-2016-9125)

Drupal Core 8.7.x Denial of Service (8.7.0 - 8.7.10)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7982)

WordPress Plugin Broken Link Checker Unspecified Vulnerability (1.10.7)

WordPress Plugin Woocommerce CSV importer Arbitrary File Deletion (3.3.6)

Severity

High

Classification

CVE-2002-2272 CWE-119

Tags

Missing Update Known Vulnerabilities