Description
Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
Remediation
References
Related Vulnerabilities
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.29)
Liferay Portal Use of Default Password Vulnerability (CVE-2025-43799)
WordPress Plugin YITH Maintenance Mode Multiple Cross-Site Scripting Vulnerabilities (1.3.8)
Liferay Portal Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2025-43808)
MediaWiki Improper Input Validation Vulnerability (CVE-2014-1610)