Advanced

'Dead simple' hijacking hole in Apache Tomcat 'now actively exploited in the wild'

Posted by Scott_Ruecker on
The Register; By Iain Thompson
Mail this story
Print this story

One PUT request, one poisoned session file, and the server’s yours. A trivial flaw in Apache Tomcat that allows remote code execution and access to sensitive files is said to be under attack in the wild within a week of its disclosure.

Full Story

  Nav
» Read more about: Story Type: News Story; Groups: Apache

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

This topic does not have any threads posted yet!

You cannot post until you login.