A vulnerability has been reported in Jetty, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within a hash generation function when hashing form posts and updating a hash table. This can be exploited to cause a hash collision resulting in high CPU consumption via a specially crafted form sent in a HTTP POST request.

Solution
Currently there is no known workaround.

Provided and/or discovered by
Alexander Klink, n.runs AG and Julian Wälde, Technische Universität Darmstadt

Original Advisory
n.runs (SA-2011.004):
http://www.nruns.com/_downloads/advisory28122011.pdf

oCERT (#2011-003):
http://www.ocert.org/advisories/ocert-2011-003.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers