Multiple vulnerabilities have been reported in Apache Tomcat, which can be exploited by malicious, local users to bypass certain security restrictions and by malicious people to conduct cross-site scripting attacks and cause a DoS (Denial of Service).

For more information:
SA43198

1) An error due to the "maxHttpHeaderSize" limit not being enforced in the NIO HTTP connector can be exploited to cause an "OutOfMemory" error via a specially crafted web request.

Please see the vendor's advisory for a list of affected versions.

Solution
Update to a fixed version.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://tomcat.apache.org/security-6.html
http://tomcat.apache.org/security-7.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers