• info
• discussion
• exploit
• solution
• references

Apache Tomcat mod_jk Content Length Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 arm

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb


• Debian libapache-mod-jk_1.2.18-3etch2_arm.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk_1.2.18-3etch2_arm.deb


• Debian libapache2-mod-jk_1.2.18-3etch2_arm.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.18-3etch2_arm.deb

Debian Linux 5.0 ia-64

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_ia64.deb

Debian Linux 4.0 powerpc

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb


• Debian libapache-mod-jk_1.2.18-3etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk_1.2.18-3etch2_powerpc.deb


• Debian libapache2-mod-jk_1.2.18-3etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.18-3etch2_powerpc.deb

Debian Linux 4.0 m68k

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb

Sun Solaris 10_x86

• Sun 122912-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122912-16-1

Debian Linux 5.0 alpha

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_alpha.deb

Debian Linux 5.0 ia-32

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_i386.deb

Debian Linux 5.0 s/390

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_s390.deb

Debian Linux 5.0 mipsel

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_mipsel.deb

Sun Solaris 10

• Sun 122911-16
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122911-16-1

Debian Linux 4.0 amd64

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb


• Debian libapache-mod-jk_1.2.18-3etch2_amd64.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk_1.2.18-3etch2_amd64.deb


• Debian libapache2-mod-jk_1.2.18-3etch2_amd64.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.18-3etch2_amd64.deb

Debian Linux 4.0 ia-32

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb


• Debian libapache-mod-jk_1.2.18-3etch2_i386.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk_1.2.18-3etch2_i386.deb


• Debian libapache2-mod-jk_1.2.18-3etch2_i386.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.18-3etch2_i386.deb

Debian Linux 5.0 hppa

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_hppa.deb

Sun Solaris 9

• Sun 114016-04
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -114016-04-1

Debian Linux 4.0 hppa

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb


• Debian libapache-mod-jk_1.2.18-3etch2_hppa.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk_1.2.18-3etch2_hppa.deb


• Debian libapache2-mod-jk_1.2.18-3etch2_hppa.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.18-3etch2_hppa.deb

Debian Linux 4.0 sparc

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb


• Debian libapache-mod-jk_1.2.18-3etch2_sparc.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk_1.2.18-3etch2_sparc.deb


• Debian libapache2-mod-jk_1.2.18-3etch2_sparc.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.18-3etch2_sparc.deb

Debian Linux 4.0 s/390

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb


• Debian libapache-mod-jk_1.2.18-3etch2_s390.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk_1.2.18-3etch2_s390.deb


• Debian libapache2-mod-jk_1.2.18-3etch2_s390.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.18-3etch2_s390.deb

Sun Solaris 9_x86

• Sun 114017-04
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -114017-04-1

Debian Linux 5.0 m68k

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb

Debian Linux 5.0 arm

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_arm.deb

Debian Linux 4.0 alpha

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb


• Debian libapache-mod-jk_1.2.18-3etch2_alpha.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk_1.2.18-3etch2_alpha.deb


• Debian libapache2-mod-jk_1.2.18-3etch2_alpha.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.18-3etch2_alpha.deb

Debian Linux 4.0 armel

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb

Debian Linux 5.0 armel

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_armel.deb

Debian Linux 5.0

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb

Debian Linux 4.0

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb

Debian Linux 4.0 mipsel

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb


• Debian libapache-mod-jk_1.2.18-3etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk_1.2.18-3etch2_mipsel.deb


• Debian libapache2-mod-jk_1.2.18-3etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.18-3etch2_mipsel.deb

Debian Linux 5.0 amd64

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_amd64.deb

Debian Linux 5.0 mips

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_mips.deb

Debian Linux 5.0 powerpc

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_powerpc.deb

Debian Linux 4.0 ia-64

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb


• Debian libapache-mod-jk_1.2.18-3etch2_ia64.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk_1.2.18-3etch2_ia64.deb


• Debian libapache2-mod-jk_1.2.18-3etch2_ia64.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.18-3etch2_ia64.deb

Debian Linux 4.0 mips

• Debian libapache-mod-jk-doc_1.2.18-3etch2_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.18-3etch2_all.deb


• Debian libapache-mod-jk_1.2.18-3etch2_mips.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk_1.2.18-3etch2_mips.deb


• Debian libapache2-mod-jk_1.2.18-3etch2_mips.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.18-3etch2_mips.deb

Debian Linux 5.0 sparc

• Debian libapache-mod-jk-doc_1.2.26-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache-mod-jk-doc_1.2.26-2+lenny1_all.deb


• Debian libapache2-mod-jk_1.2.26-2+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/liba/libapache-mod-jk/lib apache2-mod-jk_1.2.26-2+lenny1_sparc.deb