Ubuntu.comUB:CVE-2008-5519CVE-2008-5519
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
53.6%
The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows
remote attackers to obtain sensitive information via an arbitrary request
from an HTTP client, in opportunistic circumstances involving (1) a request
from a different client that included a Content-Length header but no POST
data or (2) a rapid series of requests, related to noncompliance with the
AJP protocolβs requirements for requests containing Content-Length headers.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.10 | noarch | libapache-mod-jk | <Β 1:1.2.26-2+lenny1build0.8.10.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | libapache-mod-jk | <Β 1:1.2.26-2+lenny1build0.9.04.1 | UNKNOWN |
Related
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
53.6%