|
|
Family: Debian Local Security Checks --> Category: infos
[DSA395] DSA-395-1 tomcat4 Vulnerability Scan
Vulnerability Scan Summary
DSA-395-1 tomcat4
Detailed Explanation for this Vulnerability Test
Aldrin Martoq has discovered a denial of service (DoS) vulnerability in
Apache Tomcat 4.0.x. Sending several non-HTTP requests to Tomcat's HTTP
connector makes Tomcat reject further requests on this port until it is
restarted.
For the current stable distribution (woody) this problem has been fixed
in version 4.0.3-3woody3.
For the unstable distribution (sid) this problem does not exist in the
current version 4.1.24-2.
We recommend that you upgrade your tomcat4 packages and restart the
tomcat server.
Solution : http://www.debian.org/security/2003/dsa-395
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
