CVE-2002-2272: Buffer Overflow

First published: Tue Dec 31 2002(Updated: )

Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
Apache Tomcat	=4.1.2
Apache Tomcat	=4.0.4
Apache Tomcat	=4.1.9-beta
Apache HTTP server	=1.3.23
Apache HTTP server	=1.3.27
Apache HTTP server	=1.3.10
Apache HTTP server	=1.3.16
Apache HTTP server	=1.3.1
Apache HTTP server	=1.3.25
Apache HTTP server	=1.3.19
Apache HTTP server	=1.3.24
Apache HTTP server	=1.3.20
Apache HTTP server	=1.3.2
Apache Tomcat	=4.0.6
Apache HTTP server	=1.3.13
Apache Tomcat	=4.0.3
Apache HTTP server	=1.3.18
Apache Tomcat	=4.0.1
Apache HTTP server	=1.3.0
Apache HTTP server	=1.3
Apache HTTP server	=1.3.12
Apache Tomcat	=4.1.1
Apache Tomcat	=4.1.12
Apache HTTP server	=1.3.17
Apache HTTP server	=1.3.26
Apache Tomcat	=4.1.3-beta
Apache HTTP server	=1.3.15
Apache HTTP server	=1.3.14
Apache Tomcat	=4.1.10
Apache Tomcat	=4.1.0
Apache HTTP server	=1.3.22
Apache Tomcat	=4.0.2
Apache HTTP server	=1.3.11
Apache Tomcat	=4.1.3
Apache Tomcat	=4.0.5
Apache Tomcat	=4.0.0
maven/org.apache.tomcat:tomcat	>=4.0.0<=4.1.12

Remedy

http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html

Remedy

http://www.securityfocus.com/bid/6320

Never miss a vulnerability like this again

Reference Links

collector/nvd-historical
vendor/apache
product/tomcat
canonical/apache tomcat
product/http server
canonical/apache http server
collector/nvd-index
agent/remedy
agent/first-publish-date
agent/type
collector/github-advisory-latest
source/GitHub
alias/GHSA-pqr5-9v2j-44xg
alias/CVE-2002-2272
agent/software-canonical-lookup
collector/nvd-cve
source/NVD
agent/severity
agent/author
agent/weakness
agent/references
agent/description
agent/softwarecombine
collector/github-advisory
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/tags
agent/event
agent/trending
version/apache tomcat/4.1.2
version/apache tomcat/4.0.4
version/apache tomcat/4.1.9-beta
version/apache http server/1.3.23
version/apache http server/1.3.27
version/apache http server/1.3.10
version/apache http server/1.3.16
version/apache http server/1.3.1
version/apache http server/1.3.25
version/apache http server/1.3.19
version/apache http server/1.3.24
version/apache http server/1.3.20
version/apache http server/1.3.2
version/apache tomcat/4.0.6
version/apache http server/1.3.13
version/apache tomcat/4.0.3
version/apache http server/1.3.18
version/apache tomcat/4.0.1
version/apache http server/1.3.0
version/apache http server/1.3
version/apache http server/1.3.12
version/apache tomcat/4.1.1
version/apache tomcat/4.1.12
version/apache http server/1.3.17
version/apache http server/1.3.26
version/apache tomcat/4.1.3-beta
version/apache http server/1.3.15
version/apache http server/1.3.14
version/apache tomcat/4.1.10
version/apache tomcat/4.1.0
version/apache http server/1.3.22
version/apache tomcat/4.0.2
version/apache http server/1.3.11
version/apache tomcat/4.1.3
version/apache tomcat/4.0.5
version/apache tomcat/4.0.0
package-manager/maven

CVE-2002-2272: Buffer Overflow

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact