Apache Tomcat jsp应用服务器程序头信息泄露漏洞

<a href="https://www.securityfocus.com/bid/34412" target="_blank">https://www.securityfocus.com/bid/34412</a><br/> <a href="https://cxsecurity.com/issue/WLB-2009040168" target="_blank">https://cxsecurity.com/issue/WLB-2009040168</a><br/> <a href="http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200904-187" target="_blank">http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200904-187</a><br/>

Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 如果恶意客户端向Apache Tomcat服务器的mod_jk模块提交了Content-Length头为空的恶意请求，或在短时间内反复提交相同的请求的话，就可以查看其他用户请求相关的响应。

来源:bugzilla.redhat.com
链接:https://bugzilla.redhat.com/show_bug.cgi?id=490201
来源:VUPEN
名称:ADV-2009-0973
链接:http://www.vupen.com/english/advisories/2009/0973
来源:BID
名称:34412
链接:http://www.securityfocus.com/bid/34412
来源:BUGTRAQ
名称:20090407[SECURITY]CVE-2008-5519:ApacheTomcatmod_jkinformationdisclosurevulnerability
链接:http://www.securityfocus.com/archive/1/archive/1/502530/100/0/threaded
来源:REDHAT
名称:RHSA-2009:0446
链接:http://www.redhat.com/support/errata/RHSA-2009-0446.html
来源:MLIST
名称:[oss-security]20090408CVE-2008-5519:mod_jksessioninformationleakvulnerability
链接:http://www.openwall.com/lists/oss-security/2009/04/08/10
来源:DEBIAN
名称:DSA-1810
链接:http://www.debian.org/security/2009/dsa-1810
来源:tomcat.apache.org
链接:http://tomcat.apache.org/security-jk.html
来源:tomcat.apache.org
链接:http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html
来源:svn.eu.apache.org
链接:http://svn.eu.apache.org/viewvc?view=rev&revision=702540
来源:svn.eu.apache.org
链接:http://svn.eu.apache.org/viewvc/tomcat/c