An Interest In:
Web News this Week
- April 1, 2024
- March 31, 2024
- March 30, 2024
- March 29, 2024
- March 28, 2024
- March 27, 2024
- March 26, 2024
Some of Our Sources
- Engadget
- Technology Review
- Team Treehouse
- Pearsonified
- Smashing Apps
- Creative Curio
- Web Designer Depot
- Naldz Graphics
- Web Design Ledger
- Specky Boy
Help Webnuz
Referal links:
February 29, 2020 12:01 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/M4AweZiVbVc/ghostcat-bug-impacts-all-apache-tomcat-versions-released-in-the-last-13-years
Ghostcat Bug Impacts All Apache Tomcat Versions Released in the Last 13 Years
Apache Tomcat servers released in the last 13 years are vulnerable to a bug named Ghostcat that can allow hackers to take over unpatched systems. From a report: Discovered by Chinese cybersecurity firm Chaitin Tech, Ghostcat is a flaw in the Tomcat AJP protocol. AJP stands for Apache JServ Protocol and is a performance-optimized version of the HTTP protocol in binary format. Tomcat uses AJP to exchange data with nearby Apache HTTPD web servers or other Tomcat instances. Tomcat's AJP connector is enabled by default on all Tomcat servers and listens on the server's port 8009. Chaitin researchers say they discovered a bug in AJP that can be exploited to either read or write files to a Tomcat server.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/M4AweZiVbVc/ghostcat-bug-impacts-all-apache-tomcat-versions-released-in-the-last-13-years
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot