Re: how to test hash collision security fix in tomcat 7.1

2012-05-31 Thread Konstantin Kolinko
2012/5/31 manjesh manjes...@gmail.com: Hi, The exact version of tomcat I am working with is 7.0.27 I am verifying the fix discussed here http://news.softpedia.com/news/Apache-Tomcat-Workaround-for-Hashtable-Collision-DoS-Vulnerability-243544.shtml Here is the snippet of implementation  [

how to test hash collision security fix in tomcat 7.1

2012-05-30 Thread manjesh
Hi , I have downloaded tomcat 7.1 for Windows OS added the following parameter (maxParameterCoun) into server.xml Connector port=8080 protocol=HTTP/1.1 connectionTimeout=2 redirectPort=8443 maxParameterCount=5/ restarted the server. to test this fix , I

Re: how to test hash collision security fix in tomcat 7.1

2012-05-30 Thread Konstantin Kolinko
2012/5/30 manjesh manjes...@gmail.com: Hi , I have downloaded tomcat 7.1 for Windows OS 1. There is no such version. I do not know what you are testing. added the following parameter (maxParameterCoun)  into server.xml  Connector port=8080 protocol=HTTP/1.1              

Re: how to test hash collision security fix in tomcat 7.1

2012-05-30 Thread manjesh
Hi, The exact version of tomcat I am working with is 7.0.27 I am verifying the fix discussed here http://news.softpedia.com/news/Apache-Tomcat-Workaround-for-Hashtable-Collision-DoS-Vulnerability-243544.shtml Here is the snippet of implementation [ org.apache.tomcat.util.http.Parameters.java]