Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Tomcat JK Web Server Connector超长URL栈溢出漏洞
Vulnerability Description
Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 Apache Tomcat JK Web Server Connector的mod_jk.so库URI处理器map_uri_to_worker()是在native/common/jk_uri_worker_map.c文件中定义的。当该库在解析超过4095字节的超长URL请求时URI worker映射例程没有执行安全的内存拷贝，导致栈溢出。成功利用这个漏洞的攻击者可以导致拒绝服务或执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A