Apache Tomcat Buffer Overflow Vulnerability

Last Update Date: 7 Oct 2016 16:40 Release Date: 7 Oct 2016 3135 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

A vulnerability was identified in Apache Tomcat JK ISAPI Connector. A remote user can send a specially crafted URI to trigger a buffer overflow in the JK ISAPI connector and potentially execute arbitrary code on the target system.

Impact

Remote Code Execution

System / Technologies affected

Apache Tomcat JK 1.2.0 - 1.2.41

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 1.2.42

Vulnerability Identifier

CVE-2016-6808

Source

SecurityTracker
Apache