GitHub Advisoryadvisory · Maven

GHSA-xmf4-j3j7-xj7q Apache Tomcat DoS Via Requests Including Null Characters

MEDIUM Published 2022-04-30 Modified 2024-02-12 Official page ↗
Aliases
CVE-2002-0935
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-400
Reviewed
2024-02-12

Affected packages

• Maven org.apache.tomcat:tomcat: < 4.1.3-beta → fixed in 4.1.3-beta

Description

Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.

Related

Alias · CVE (1)

  • CVE-2002-0935 Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References