|
Apache Tomcat Directory Listing Denial of Service
|
|
Secunia Advisory:
|
SA17416
|
|
|
Release Date:
|
2005-11-03
|
|
Last Update:
|
2006-01-19
|
|
Popularity:
|
23,013 views
|
|
|
Critical:
|
Not critical
|
|
Impact:
|
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Partial Fix
|
|
| Software: | Apache Tomcat 5.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2005-3510
|
|
Description:
David Maciejak has discovered a vulnerability in Apache Tomcat, which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to performance limitations of the java.io.File class, which leads to the inefficient generation of directory listing for web directories that has a large number of files. By sending multiple concurrent requests for such a directory, it is possible to prevent other users from accessing the directory and causes the server to consume a large amount of CPU resources. The vulnerability affects only the directory that is being listed. Files or applications in other web directories are not affected.
Successful exploitation requires that directory listing is enabled in a directory with a large number of files.
The vulnerability has been confirmed in Tomcat version 5.5.11 and 5.5.12 on the Windows platform, and has been reported in versions 5.5.0 through 5.5.11. Other versions may also be affected.
Note: In version 5.5.12, the server will resume normal operation after a few minutes.
Solution:
The vulnerability has been partially addressed in version 5.5.12, which will resume normal operation after a few minutes.
Disable directory listing for web directories that has a large number of files.
Provided and/or discovered by:
David Maciejak
Changelog:
2005-11-10: Updated "Description" section.
2006-01-19: Added CVE reference.
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
