Re: [SECURITY] CVE-2014-0097 Apache Tomcat information disclosure

2014-05-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, On 5/27/14, 8:46 AM, Mark Thomas wrote: > CVE-2014-0097 Information Disclosure > > Severity: Important > > Vendor: The Apache Software Foundation > > Versions Affected: - Apache Tomcat 8.0.0-RC1 to 8.0.3 - Apache > Tomcat 7.0.0 to 7.0.52 - A

[SECURITY] CVE-2014-0097 Apache Tomcat information disclosure

2014-05-27 Thread Mark Thomas
CVE-2014-0097 Information Disclosure Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Apache Tomcat 8.0.0-RC1 to 8.0.3 - Apache Tomcat 7.0.0 to 7.0.52 - Apache Tomcat 6.0.0 to 6.0.39 Description: The code used to parse the request content length header did not che