CVE-2008-5519
- State
- Published
- Severity
- Not scored
- Published
- Apr 9, 2009
- Updated
- Aug 7, 2024
- Reserved
- Dec 12, 2008
Description
The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2009-0973vdb-entry
- http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html
- 34621third-party-advisory
- SUSE-SR:2009:018vendor-advisory
- 1022001vdb-entry
- 34412vdb-entry
- [oss-security] 20090408 CVE-2008-5519: mod_jk session information leak vulnerabilitymailing-list
- http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/native/common/jk_ajp_common.c?r1=702387&r2=702540&pathrev=702540&diff_format=h
- RHSA-2009:0446vendor-advisory
- [www-announce] 20090407 [SECURITY] CVE-2008-5519: Apache Tomcat mod_jk information disclosure vulnerabilitymailing-list
- http://svn.eu.apache.org/viewvc?view=rev&revision=702540
- [tomcat-dev] 20090407 [SECURITY] CVE-2008-5519: Apache Tomcat mod_jk information disclosure vulnerabilitymailing-list
- 20090407 [SECURITY] CVE-2008-5519: Apache Tomcat mod_jk information disclosure vulnerabilitymailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=490201
- 29283third-party-advisory
- http://tomcat.apache.org/security-jk.html
- 35537third-party-advisory
- DSA-1810vendor-advisory
- 262468vendor-advisory
- http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/xdocs/miscellaneous/changelog.xml?view=markup&pathrev=702540
- [tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [25/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/mailing-list
- [tomcat-dev] 20190413 svn commit: r1857494 [18/20] - in /tomcat/site/trunk: ./ docs/ xdocs/mailing-list
- [tomcat-dev] 20190415 svn commit: r1857582 [20/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/mailing-list
- [tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [30/34] - /tomcat/site/trunk/docs/mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.