TITLE:
Apache Tomcat Directory Listing Denial of Service

SECUNIA ADVISORY ID:
SA17416

VERIFY ADVISORY:
http://secunia.com/advisories/17416/

CRITICAL:
Not critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
Apache Tomcat 5.x
http://secunia.com/product/3571/

DESCRIPTION:
David Maciejak has discovered a vulnerability in Apache Tomcat, which
can be exploited by malicious people to cause a DoS (Denial of
Service).

The vulnerability is caused due to the inefficient generation of
directory listing for web directories that has a large number of
files. By sending multiple concurrent requests for such a directory,
it is possible to prevent other users from accessing the directory
and causes the server to consume a large amount of CPU resources. The
vulnerability affects only the directory that is being listed. Files
or applications in other web directories are not affected.

Successful exploitation requires that directory listing is enabled in
a directory with a large number of files.

The vulnerability has been confirmed in Tomcat version 5.5.11 and
5.5.12 on the Windows platform, and has been reported in versions
5.5.0 through 5.5.11. Other versions may also be affected.

Note: In version 5.5.12, the server will resume normal operation
after a few minutes.

SOLUTION:
The vulnerability has been partially addressed in version 5.5.12,
which will resume normal operation after a few minutes.

Disable directory listing for web directories that has a large number
of files.

PROVIDED AND/OR DISCOVERED BY:
David Maciejak

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------