Description

Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.

Remediation

References

CVE-2002-0935

Related Vulnerabilities

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-0837)

WordPress Plugin BackupBuddy Information Disclosure (2.2.28)

WordPress Plugin Social Sharing-Social Warfare Malicious Code (4.4.7.1)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4523)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0324)

Severity

Medium

Classification

CVE-2002-0935

Tags

Missing Update Known Vulnerabilities