CVE-2008-5519

The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.

• apache mod jk 1.2 • apache mod jk 1.2.1 • apache mod jk 1.2.6 • apache mod jk 1.2.7 • apache mod jk 1.2.8 • apache mod jk 1.2.9 • apache mod jk 1.2.10 • apache mod jk 1.2.11 • apache mod jk 1.2.12 • apache mod jk 1.2.13 • apache mod jk 1.2.14 • apache mod jk 1.2.14.1 • apache mod jk 1.2.15 • apache mod jk 1.2.16 • apache mod jk 1.2.17 • apache mod jk 1.2.18 • apache mod jk 1.2.19 • apache mod jk 1.2.20 • apache mod jk 1.2.21 • apache mod jk 1.2.22 • apache mod jk 1.2.23 • apache mod jk 1.2.24 • apache mod jk 1.2.25 • apache mod jk 1.2.26 • apache tomcat 4.0.0 • apache tomcat 4.0.1 • apache tomcat 4.0.2 • apache tomcat 4.0.3 • apache tomcat 4.0.4 • apache tomcat 4.0.5 • apache tomcat 4.0.6 • apache tomcat 4.1.0 • apache tomcat 4.1.1 • apache tomcat 4.1.2 • apache tomcat 4.1.3 • apache tomcat 4.1.4 • apache tomcat 4.1.5 • apache tomcat 4.1.6 • apache tomcat 4.1.7 • apache tomcat 4.1.8 • apache tomcat 4.1.9 • apache tomcat 4.1.10 • apache tomcat 4.1.11 • apache tomcat 4.1.12 • apache tomcat 4.1.13 • apache tomcat 4.1.14 • apache tomcat 4.1.15 • apache tomcat 4.1.16 • apache tomcat 4.1.17 • apache tomcat 4.1.18 • apache tomcat 4.1.19 • apache tomcat 4.1.20 • apache tomcat 4.1.21 • apache tomcat 4.1.22 • apache tomcat 4.1.23 • apache tomcat 4.1.24 • apache tomcat 4.1.25 • apache tomcat 4.1.26 • apache tomcat 4.1.27 • apache tomcat 4.1.28 … and 66 more