DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=28713>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28713

Line too long - DoS Attack

           Summary: Line too long - DoS Attack
           Product: Tomcat 4
           Version: 4.0.3 Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Critical
          Priority: Other
         Component: Catalina
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


Somebody is attacking my Tomcat Server sending a big HTTP header. When the 
server gets this request it throws an IOException and the HTTPProcessor hangs. 

The exception is:

HttpProcessor[80][1] process.parse
java.io.IOException: Line too long
        at org.apache.catalina.connector.http.SocketInputStream.readRequestLine
(SocketInputStream.java:271)
        at org.apache.catalina.connector.http.HttpProcessor.parseRequest
(HttpProcessor.java:695)
        at org.apache.catalina.connector.http.HttpProcessor.process
(HttpProcessor.java:959)
        at org.apache.catalina.connector.http.HttpProcessor.run
(HttpProcessor.java:1107)
        at java.lang.Thread.run(Unknown Source)


After all HTTPProcessors are hung every connection to the server fails. This 
issue is related to Bug 3511. The HTTP port is able to respond but cannot 
respond since there aren't processors available to handle the request. The 
catalina log keeps showing:

"HttpConnector[80] No processor available, rejecting this connection"

Are there any workarounds for this issue? I don't understand why the processor 
hangs since this should be a handled exception...

Thxs!

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to