NVD

Id
47382  
Name
CVE-2009-0033  
Description
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-06-05  
Modified Date
2016-08-22  
Seq
2009-0033  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
236973 47382 CVE-2009-0033 JVN#87272440  View
236974 47382 CVE-2009-0033 APPLE-SA-2010-03-29-1  View
236975 47382 CVE-2009-0033 SUSE-SR:2009:012  View
236976 47382 CVE-2009-0033 SSRT100029  View
236977 47382 CVE-2009-0033 HPSBUX02579  View
236978 47382 CVE-2009-0033 SSRT100825  View
236979 47382 CVE-2009-0033 HPSBUX02860  View
236980 47382 CVE-2009-0033 oval:org.mitre.oval:def:10231  View
236981 47382 CVE-2009-0033 oval:org.mitre.oval:def:19110  View
236982 47382 CVE-2009-0033 oval:org.mitre.oval:def:5739  View
236983 47382 CVE-2009-0033 1022331  View
236984 47382 CVE-2009-0033 263529  View
236985 47382 CVE-2009-0033 http://support.apple.com/kb/HT4077  View
236986 47382 CVE-2009-0033 http://svn.apache.org/viewvc?rev=742915&view=rev  View
236987 47382 CVE-2009-0033 http://svn.apache.org/viewvc?rev=781362&view=rev  View
236988 47382 CVE-2009-0033 http://tomcat.apache.org/security-4.html  View
236989 47382 CVE-2009-0033 http://tomcat.apache.org/security-5.html  View
236990 47382 CVE-2009-0033 http://tomcat.apache.org/security-6.html  View
236991 47382 CVE-2009-0033 DSA-2207  View
236992 47382 CVE-2009-0033 MDVSA-2009:136  View
236993 47382 CVE-2009-0033 MDVSA-2009:138  View
236994 47382 CVE-2009-0033 MDVSA-2010:176  View
236995 47382 CVE-2009-0033 20090603 [SECURITY] CVE-2009-0033 Apache Tomcat DoS when using Java AJP connector  View
236996 47382 CVE-2009-0033 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
236997 47382 CVE-2009-0033 35193  View
236998 47382 CVE-2009-0033 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
236999 47382 CVE-2009-0033 ADV-2009-1496  View
237000 47382 CVE-2009-0033 ADV-2009-1856  View
237001 47382 CVE-2009-0033 ADV-2009-3316  View
237002 47382 CVE-2009-0033 ADV-2010-3056  View
237003 47382 CVE-2009-0033 tomcat-ajp-dos(50928)  View
237004 47382 CVE-2009-0033 FEDORA-2009-11374  View
237005 47382 CVE-2009-0033 FEDORA-2009-11352  View
237006 47382 CVE-2009-0033 FEDORA-2009-11356  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39952 JVNDB-2009-000037 Apache Tomcat におけるサービス運用妨害（DoS）の脆弱性 The Apache Software Foundation が提供する Apache Tomcat には、サービス運用妨害（DoS）の脆弱性が存在します。 CVE-2009-0033 37464 CVE-2009-0033 47382 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000037.html 2009-06-09 2012-09-28 View