Java Mailing List Archive

http://www.junlu.com/

Home » Home (12/2007) » Apache Tomcat »

Re: Issues with mod_jk and escaped sequences in URLs (particularly
%2F)

Mark Thomas

2007-08-07

Replies:

Christopher Swingler wrote:
> Hi there list.
>
> We're experiencing an odd issue when a URL contains an escaped sequence, in particular, the escaped sequence for forward slash (%2F). We have a servlet defined in httpd.conf as such:

Take a look at:
- http://tomcat.apache.org/security-5.html CVE-2007-0450
- http://tomcat.apache.org/security-jk.html CVE-2007-1860

It should be a case of 'just' using the latest versions and setting
the right combination of options.

Mark


---------------------------------------------------------------------
To start a new topic, e-mail: users@(protected)
To unsubscribe, e-mail: users-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)

©2008 junlu.com - Jax Systems, LLC, U.S.A.