CVE:CVE-2011-0534
CNNVD:CNNVD-201102-160
Apache Tomcat 是一款由Apache Foundation维护的免费开放源代码的Java Servlet和JSP服务程序。
Apache Tomcat 7.0.0至7.0.6，和6.0.0至6.0.30没有为与NIO HTTP连接器有关的请求强制执行maxHttpHeaderSize限制。远程攻击者可以借助特制请求导致拒绝服务(OutOfMemoryError)。
solution:Upgrade apache tomcat to a higher version than 7.0.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,6.0.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,6.0.6,6.0.7,6.0.8,6.0.9,6.0.10,6.0.11,6.0.12,6.0.13,6.0.14,6.0.15,6.0.16,6.0.17,6.0.18,6.0.19,6.0.20,6.0.24,6.0.26,6.0.27,6.0.28,6.0.29,6.0.30,and avoid the version 7.0.0,7.0.1,7.0.2,7.0.3,7.0.4,7.0.5,7.0.6,6.0.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,6.0.6,6.0.7,6.0.8,6.0.9,6.0.10,6.0.11,6.0.12,6.0.13,6.0.14,6.0.15,6.0.16,6.0.17,6.0.18,6.0.19,6.0.20,6.0.24,6.0.26,6.0.27,6.0.28,6.0.29,6.0.30