CVEvulnerability

CVE-2002-2272

7.8 HIGH Published 2002-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-119

Description

Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

Affected configurations

• apache http server 1.3 • apache http server 1.3.0 • apache http server 1.3.1 • apache http server 1.3.2 • apache http server 1.3.10 • apache http server 1.3.11 • apache http server 1.3.12 • apache http server 1.3.13 • apache http server 1.3.14 • apache http server 1.3.15 • apache http server 1.3.16 • apache http server 1.3.17 • apache http server 1.3.18 • apache http server 1.3.19 • apache http server 1.3.20 • apache http server 1.3.22 • apache http server 1.3.23 • apache http server 1.3.24 • apache http server 1.3.25 • apache http server 1.3.26 • apache http server 1.3.27 • apache tomcat 4.0.0 • apache tomcat 4.0.1 • apache tomcat 4.0.2 • apache tomcat 4.0.3 • apache tomcat 4.0.4 • apache tomcat 4.0.5 • apache tomcat 4.0.6 • apache tomcat 4.1.0 • apache tomcat 4.1.1 • apache tomcat 4.1.2 • apache tomcat 4.1.3 • apache tomcat 4.1.9 • apache tomcat 4.1.10 • apache tomcat 4.1.12

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References