CVE-2002-2272

Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

CVSS v2.0

7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

9.68% chance of exploitation in the next 30 days, 95th percentile

Published

2007-10-18

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/22068

References

• CVE Record
• NVD entry

Related

• CVE-2002-2268
• CVE-2002-2281
• CVE-2002-2258
• CVE-2002-2287
• CVE-2002-2255
• CVE-2002-2288