We have a Windows Server 2012 R2 running Apache 2.2.27 and Apache tomcat8 version 22.214.171.124.
Can you guys shed a few words on what the vulnerability is and also how to re-mediate this with the two versions that we are running in our environment.
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
My guess is that you referring to CVE-2004-0492 "mod_proxy in Apache 1.3.25 to 1.3.31 ... possibly execute arbitrary code via a negative Content-Length HTTP header field..." . As you can see, this bug did affect apache version 1.3.25 ... 1.3.31 but not your version 2.2.27.