Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2007-6286

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-qrj4-rmqg-4hcp

Apache Tomcat Does Not Properly Handle Empty Requests Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as demonstrated by using netcat to send the empty request.

gitlab/maven/org.apache.tomcat/tomcat/CVE-2007-6286

Apache Tomcat Does Not Properly Handle Empty Requests Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as demonstrated by using netcat to send the empty request.