CVE-2008-5519
EPSS 4.6%libapache-mod-jk - information
發布日:2009/4/9修改日:2026/4/28
也稱為:DEBIAN-CVE-2008-5519
描述
The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.
受影響套件(2)
- Debian/libapache-mod-jkfrom 0, < 1:1.2.26-2.1
- Debian/libapache-mod-jkfrom 0, < 1:1.2.18-3etch2