Sebb,

On 2/9/15 6:24 AM, sebb wrote:
> On 9 February 2015 at 09:12, Mark Thomas <ma...@apache.org> wrote:
> CVE-2014-0227 Request Smuggling
> 
> Severity: Important
> 
> Vendor: The Apache Software Foundation
> 
> Versions Affected:
> - Apache Tomcat 8.0.0-RC1 to 8.0.8
> - Apache Tomcat 7.0.0 to 7.0.54
> - Apache Tomcat 6.0.0 to 6.0.41
> 
> Description:
> It was possible to craft a malformed chunk as part of a chucked request
> 
>> s/chucked/chunked/?

Nope, "chucked". It's part of "Web 2.0".

-chris

;)

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to