Gentoo: GLSA-200906-04 Low Severity: Information Leak in Apache Tomcat JK

Gentoo Linux Security Advisory GLSA 200906-04 https://security.gentoo.org/ Severity: Low Title: Apache Tomcat JK Connector: Information disclosure Date: June 29, 2009 Bugs: #265455 ID: 200906-04

Synopsis ======= An error in the Apache Tomcat JK Connector might allow for an information disclosure flaw.
Background ========= The Apache Tomcat JK Connector (aka mod_jk) connects the Tomcat application server with the Apache HTTP Server.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apache/mod_jk < 1.2.27 >= 1.2.27
========== The Red Hat Security Response Team discovered that mod_jk does not properly handle (1) requests setting the "Content-Length" header ...