medium5.0
CVE-2004-2381
Jetty HTTP Server Denial of Service vulnerability
Impact
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.mortbay.jetty:jetty | < 4.2.19 | 4.2.19 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jetty | Jetty Http Server | Versions 4.0.0, 4.0.1, 4.0.1_rc0, 4.0.1_rc1, 4.0.1_rc2, 4.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://cvs.sourceforge.net/viewcvs.py/jetty/Jetty/src/org/mortbay/http/HttpRequest.java?r1=1.75&r2=1.76
- http://secunia.com/advisories/11166/
- http://sourceforge.net/project/shownotes.php?release_id=224743
- http://www.osvdb.org/4387
- http://www.securityfocus.com/bid/9917
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15537
- https://github.com/advisories/GHSA-p5rr-q5g6-gm42
- https://nvd.nist.gov/vuln/detail/CVE-2004-2381