NVD

Id
5268  
Name
CVE-2008-5519  
Description
The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol"s requirements for requests containing Content-Length headers.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2009-04-09  
Modified Date
2010-05-04  
Seq
2008-5519  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33279 5268 CVE-2008-5519 SUSE-SR:2009:018  View
33280 5268 CVE-2008-5519 [www-announce] 20090407 [SECURITY] CVE-2008-5519: Apache Tomcat mod_jk information disclosure vulnerability  View
33281 5268 CVE-2008-5519 [tomcat-dev] 20090407 [SECURITY] CVE-2008-5519: Apache Tomcat mod_jk information disclosure vulnerability  View
33282 5268 CVE-2008-5519 1022001  View
33283 5268 CVE-2008-5519 262468  View
33284 5268 CVE-2008-5519 http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/native/common/jk_ajp_common.c?r1=702387&r2=702540&pathrev=702540&diff_format=h  View
33285 5268 CVE-2008-5519 http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/xdocs/miscellaneous/changelog.xml?view=markup&pathrev=702540  View
33286 5268 CVE-2008-5519 http://svn.eu.apache.org/viewvc?view=rev&revision=702540  View
33287 5268 CVE-2008-5519 http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html  View
33288 5268 CVE-2008-5519 http://tomcat.apache.org/security-jk.html  View
33289 5268 CVE-2008-5519 DSA-1810  View
33290 5268 CVE-2008-5519 [oss-security] 20090408 CVE-2008-5519: mod_jk session information leak vulnerability  View
33291 5268 CVE-2008-5519 RHSA-2009:0446  View
33292 5268 CVE-2008-5519 20090407 [SECURITY] CVE-2008-5519: Apache Tomcat mod_jk information disclosure vulnerability  View
33293 5268 CVE-2008-5519 34412  View
33294 5268 CVE-2008-5519 ADV-2009-0973  View
33295 5268 CVE-2008-5519 https://bugzilla.redhat.com/show_bug.cgi?id=490201  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40192 JVNDB-2009-001198 Apache Tomcat の JK Connector における重要な情報が取得される脆弱性 Apache Tomcat の JK Connector には、Content-Length ヘッダの処理に関して不備があるため、HTTP クライアントからの任意のリクエストにより、重要な情報が取得される脆弱性が存在します。 CVE-2008-5519 35632 CVE-2008-5519 5268 2.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001198.html 2009-04-09 2009-07-08 View