[security-alerts] FW: [SA24398] Apache Tomcat JK Web Server Connector Long URL Buffer Overflow

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> ----------------------------------------------------------------------
> 
> TITLE:
> Apache Tomcat JK Web Server Connector Long URL Buffer Overflow
> 
> SECUNIA ADVISORY ID:
> SA24398
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/24398/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Apache Tomcat 5.x
> http://secunia.com/product/3571/
> Apache Tomcat 4.x
> http://secunia.com/product/328/
> Apache Tomcat JK Web Server Connector 1.x
> http://secunia.com/product/13598/
> 
> DESCRIPTION:
> A vulnerability has been reported in Apache Tomcat JK Web Server
> Connector, which can be exploited by malicious people to compromise a
> vulnerable system.
> 
> The vulnerability is caused due to a boundary error within the
> "map_uri_to_worker()" function in the mod_jk.so library. This can be
> exploited to cause a stack-based buffer overflow via an overly long
> (more than 4,095 bytes) URL request.
> 
> Successful exploitation allows execution of arbitrary code.
> 
> The vulnerability reportedly only affects versions 1.2.19 and 1.2.20.
> Tomcat versions 5.5.20 and 4.1.34 are reportedly also affected as they
> contain the vulnerable connector version in their source packages.
> 
> SOLUTION:
> Update to version 1.2.21.
> 
> PROVIDED AND/OR DISCOVERED BY:
> Discovered by an anonymous researcher and reported via ZDI.
> 
> ORIGINAL ADVISORY:
> Apache Tomcat:
> http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html
> http://tomcat.apache.org/security-jk.html
> 
> ZDI:
> http://www.zerodayinitiative.com/advisories/ZDI-07-008.html
> 
> ----------------------------------------------------------------------