Author: markt Date: Sat Feb 24 17:41:29 2007 New Revision: 511399 URL: http://svn.apache.org/viewvc?view=rev&rev=511399 Log: Add documentation for CVE-2003-0866
Modified: tomcat/site/trunk/docs/security-4.html tomcat/site/trunk/xdocs/security-4.xml Modified: tomcat/site/trunk/docs/security-4.html URL: http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-4.html?view=diff&rev=511399&r1=511398&r2=511399 ============================================================================== --- tomcat/site/trunk/docs/security-4.html (original) +++ tomcat/site/trunk/docs/security-4.html Sat Feb 24 17:41:29 2007 @@ -263,6 +263,41 @@ <tr> <td bgcolor="#525D76"> <font color="#ffffff" face="arial,helvetica,sanserif"> +<a name="Fixed in Apache Tomcat 4.1.0"> +<strong>Fixed in Apache Tomcat 4.1.0</strong> +</a> +</font> +</td> +</tr> +<tr> +<td> +<p> +<blockquote> + <p> +<strong>important: Denial of service</strong> + <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0866"> + CVE-2003-0866</a> +</p> + + <p>A malformed HTTP request can cause the request processing thread to + become unresponsive. A sequence of such requests will cause all request + processing threads, and hence Tomcat as a whole, to become unresponsive.</p> + + <p>Affects: 4.0.0-4.0.6</p> + </blockquote> +</p> +</td> +</tr> +<tr> +<td> +<br/> +</td> +</tr> +</table> +<table border="0" cellspacing="0" cellpadding="2" width="100%"> +<tr> +<td bgcolor="#525D76"> +<font color="#ffffff" face="arial,helvetica,sanserif"> <a name="Unverified"> <strong>Unverified</strong> </a> Modified: tomcat/site/trunk/xdocs/security-4.xml URL: http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-4.xml?view=diff&rev=511399&r1=511398&r2=511399 ============================================================================== --- tomcat/site/trunk/xdocs/security-4.xml (original) +++ tomcat/site/trunk/xdocs/security-4.xml Sat Feb 24 17:41:29 2007 @@ -54,6 +54,18 @@ <p>Affects: 4.0.0-4.0.6, 4.1.0-4.1.31</p> </section> + <section name="Fixed in Apache Tomcat 4.1.0"> + <p><strong>important: Denial of service</strong> + <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0866"> + CVE-2003-0866</a></p> + + <p>A malformed HTTP request can cause the request processing thread to + become unresponsive. A sequence of such requests will cause all request + processing threads, and hence Tomcat as a whole, to become unresponsive.</p> + + <p>Affects: 4.0.0-4.0.6</p> + </section> + <section name="Unverified"> <p><strong>low: Installation path disclosure</strong> <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4703"> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]