Description

The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.

Remediation

References

CVE-2006-7197

Related Vulnerabilities

Oracle Database Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2003-0096)

WordPress Plugin Stock in & out Cross-Site Scripting (1.0.4)

WordPress Plugin Calendar Unspecified Vulnerability (1.3.10)

Play Framework Data Amplification Vulnerability (CVE-2020-28923)

WordPress Plugin leads5050-visitor-insights Security Bypass (1.0.5)

Severity

High

Classification

CVE-2006-7197

Tags

Missing Update Known Vulnerabilities