Signature Detail
Short Name |
HTTP:APACHE:FILEUPLOAD-CNT-TYPE |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Apache Tomcat FileUpload Content-Type Header Infinite Loop |
Release Date |
2014/02/26 |
Update Number |
2349 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Apache Tomcat FileUpload Content-Type Header Infinite Loop
This signature detects attempts to exploit a known vulnerability in Apache Tomcat. The vulnerability is due to insufficient boundary checks when processing the Content-Type header of a multipart request. A remote attacker could exploit this vulnerability by sending a large amount of data to the server causing it to use up excessive resources. Successful exploitation could cause a denial of service condition on the server.
Extended Description
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop s intended exit conditions.
Affected Products
- Apache commons_fileupload 1.0
- Apache commons_fileupload 1.1
- Apache commons_fileupload 1.1.1
- Apache commons_fileupload 1.2
- Apache commons_fileupload 1.2.1
- Apache commons_fileupload 1.2.2
- Apache commons_fileupload 1.3
- Apache tomcat 7.0.0
- Apache tomcat 7.0.1
- Apache tomcat 7.0.10
- Apache tomcat 7.0.11
- Apache tomcat 7.0.12
- Apache tomcat 7.0.13
- Apache tomcat 7.0.14
- Apache tomcat 7.0.15
- Apache tomcat 7.0.16
- Apache tomcat 7.0.17
- Apache tomcat 7.0.18
- Apache tomcat 7.0.19
- Apache tomcat 7.0.2
- Apache tomcat 7.0.20
- Apache tomcat 7.0.21
- Apache tomcat 7.0.22
- Apache tomcat 7.0.23
- Apache tomcat 7.0.24
- Apache tomcat 7.0.25
- Apache tomcat 7.0.26
- Apache tomcat 7.0.27
- Apache tomcat 7.0.28
- Apache tomcat 7.0.29
- Apache tomcat 7.0.3
- Apache tomcat 7.0.30
- Apache tomcat 7.0.31
- Apache tomcat 7.0.32
- Apache tomcat 7.0.33
- Apache tomcat 7.0.34
- Apache tomcat 7.0.35
- Apache tomcat 7.0.36
- Apache tomcat 7.0.37
- Apache tomcat 7.0.38
- Apache tomcat 7.0.39
- Apache tomcat 7.0.4
- Apache tomcat 7.0.40
- Apache tomcat 7.0.41
- Apache tomcat 7.0.42
- Apache tomcat 7.0.43
- Apache tomcat 7.0.44
- Apache tomcat 7.0.45
- Apache tomcat 7.0.46
- Apache tomcat 7.0.47
- Apache tomcat 7.0.48
- Apache tomcat 7.0.49
- Apache tomcat 7.0.5
- Apache tomcat 7.0.50
- Apache tomcat 7.0.6
- Apache tomcat 7.0.7
- Apache tomcat 7.0.8
- Apache tomcat 7.0.9
- Apache tomcat 8.0.0
- Apache tomcat 8.0.1
References
- CVE: CVE-2014-0050