Gentoo Linux Security Advisory GLSA 200705-03 - Tomcat allows special characters like slash, backslash or URL-encoded backslash as a separator, while Apache does not. Versions less than 5.5.22 are affected.
af5ff8f4aba2e8e66a38f61809dad3fef6df6019b9e4b4050eaf522de529babc