Apache

Tomcat Jk Web Server Connector

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2007-1860

  • EPSS 17.44%
  • Published 25.05.2007 18:30:00
  • Last modified 09.04.2025 00:30:58

mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly in...

7.5

CVE-2007-0774

  • EPSS 86.75%
  • Published 04.03.2007 22:19:00
  • Last modified 09.04.2025 00:30:58

Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitr...