Jetty < 4.2.19 Denial of Service

The remote host is running a version of Jetty which is older than 4.2.19. The version is vulnerable to a unspecified denial of service. OpenVAS Vulnerability Test $Id: jetty419dos.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Jetty Fixes by Tenable: - added CVE and OSVDB xrefs. Copyright:...

CVE-2004-2381

CVE-2004-2381 affects the Jetty HTTP Server prior to 4.2.19. The vulnerability arises in HttpRequest.java handling of HTTP requests with a large Content-Length, allowing remote attackers over the network to cause memory usage growth and a denial of service (application crash). Affected products a...