CVEs-PoC/2010/CVE-2010-2227.md

CVE-2010-2227

Description

Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."

POC

Reference

• http://www.vmware.com/security/advisories/VMSA-2011-0003.html
• http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/marcocastro100/Intrusion_Detection_System-Python