CVE-2005-3164: Infoleak
The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which can lead to an information leak when "unsuitable request body data" is used for a different request, possibly related to Java Servlet pages.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3164?
CVE-2005-3164 has a severity rating that indicates a moderate risk of information leakage.
How do I fix CVE-2005-3164?
To fix CVE-2005-3164, update Apache Tomcat to a version later than 4.1.36 or 4.0.6.
Which software is affected by CVE-2005-3164?
CVE-2005-3164 affects Apache Tomcat versions from 4.0.1 to 4.0.6 and 4.1.0 to 4.1.36, as well as specific versions of Hitachi Cosminexus Application Server.
What type of vulnerability is CVE-2005-3164?
CVE-2005-3164 is a vulnerability that concerns improper handling of broken connections during POST requests.
Can CVE-2005-3164 lead to data theft?
Yes, CVE-2005-3164 can potentially lead to an information leak, which may result in unauthorized access to sensitive data.