CVE-2002-2272
Apache Tomcat 4.0-4.1.12 with mod_jk 1.2.1 - Denial of Service via Invalid Chunked Transfer-Encoding
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-2272. PoCs published by Sapient2003.
AI-analyzed exploit summary This Perl script exploits a denial of service vulnerability in Apache Webserver and Tomcat when using mod_jk. It sends a malicious chunked encoding request to desynchronize Apache and Tomcat, leading to a DoS condition.
Description
Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
Exploits (1)
This Perl script exploits a denial of service vulnerability in Apache Webserver and Tomcat when using mod_jk. It sends a malicious chunked encoding request to desynchronize Apache and Tomcat, leading to a DoS condition.