Re: [SECURITY] CVE-2014-0095 Apache Tomcat denial of service

2014-05-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, On 5/27/14, 2:41 PM, Christopher Schultz wrote: > All, > > On 5/27/14, 8:46 AM, Mark Thomas wrote: >> CVE-2014-0095 Denial of Service > >> Severity: Important > >> Vendor: The Apache Software Foundation > >> Versions Affected: - Apache Tomc

Re: [SECURITY] CVE-2014-0095 Apache Tomcat denial of service

2014-05-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, On 5/27/14, 8:46 AM, Mark Thomas wrote: > CVE-2014-0095 Denial of Service > > Severity: Important > > Vendor: The Apache Software Foundation > > Versions Affected: - Apache Tomcat 8.0.0-RC2 to 8.0.3 > > Description: A regression was introdu