Re: CVE-2012-4534 Apache Tomcat denial of service

2012-12-04 Thread Stephen Caine
Jim, Check your Tomcat version. http://localhost:8080/ Stephen On Dec 4, 2012, at 2:47 PM, Mark Thomas wrote: > CVE-2012-4534 Apache Tomcat denial of service > > Severity: Important > > Vendor: The Apache Software Foundation > > Versions Affected: > - Tomcat 7.

CVE-2012-4534 Apache Tomcat denial of service

2012-12-04 Thread Mark Thomas
CVE-2012-4534 Apache Tomcat denial of service Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Tomcat 7.0.0 to 7.0.27 - Tomcat 6.0.0 to 6.0.35 Description: When using the NIO connector with sendfile and HTTPS enabled, if a client breaks the connection while