Bug 73724

Summary:	Tomcat HTTP server DoS vulnerability
Product:	[Retired] Stronghold Cross Platform	Reporter:	Gary Benson <gbenson>
Component:	tomcat	Assignee:	Gary Benson <gbenson>
Status:	CLOSED ERRATA	QA Contact:	Stronghold Engineering List <stronghold-eng-list>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4.0	CC:	stronghold-eng-list
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
URL:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0935
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2002-11-07 17:41:12 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Gary Benson 2002-09-09 15:33:40 UTC

Tomcat 4.0.3 is vulnerable to CAN-2002-0935, whereby remote attackers can cause
a denial of service by sending a number of specially crafted requests to the
server.   Stronghold is not vulnerable in the default configuration, but it is
vulnerable if the user enables the Tomcat-Standalone service.

Comment 1 Joe Orton 2002-11-07 17:41:12 UTC

An errata has been issued which should help the problem described in this bug report. 
This report is therefore being closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files, please follow the link below. You may reopen 
this bug report if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2002-218.html