← Database

CVE-2002-2272

HIGH CVSS: 7.8 Published: 2002-12-31 Modified: 2026-06-16

Description

Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

Affected Platforms

Apache TomcatApache Http Server

Weakness Type

CWE-119

References