tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jens Neu <>
Subject Re: CVE-2009-3555 fix in tomcat-native-1.1.19?! [solved]
Date Mon, 18 Jan 2010 07:56:17 GMT
yes, thats it, zero html write.
Thank you for opening my eyes, maybe I should not have done that on a 
Friday evening :) Totally fixated on that tlsv1 alert I was...

regards from Berlin!

Jens Neu
Health Services Network Administration

Phone: +49 (0) 30 68905-2412

Mladen Turk <> 
01/15/2010 06:13 PM
Please respond to
"Tomcat Users List" <>

Tomcat Users List <>

Re: CVE-2009-3555 fix in tomcat-native-1.1.19?!

On 01/15/2010 05:35 PM, Jens Neu wrote:
> Dear all,
> the GET / HTTP/1.0 until the "R" is manually inserted, I expect 
> like
> <code>
> 2860:error:1409444C:SSL routines:SSL3_READ_BYTES:tlsv1 alert no
> renegotiation:./ ssl/s3_pkt.c:1053:SSL alert number 100
> </code>
> but certainly no RENEGOTIATION. Any hints?

Tomcat Native handles that like mod_ssl
(actually I backported the mod_ssl code for that)
by simply dropping the connection.
I see you have 0 length write, so that's fine right?


To unsubscribe, e-mail:
For additional commands, e-mail:

Woermannkehre 1, 12359 Berlin, Germany
Sitz der Gesellschaft: Berlin, Registergericht: Berlin HRA 6501

Vertreten durch ihre Komplementärin:
Sitz der Gesellschaft: Berlin, Registergericht: Berlin HRB 118866 B
Vorsitzender des Verwaltungsrats: Dr. Max Schaldach
Geschäftsführende Direktoren: Christoph Böhmer, Dr. Werner Braun, Dr. 
Lothar Krings

BIOTRONIK - A global manufacturer of advanced Cardiac Rhythm Management 
systems and Vascular Intervention devices. Quality, innovation, and 
reliability define BIOTRONIK and our growing success. We are innovators of 
technologies like the first wireless remote monitoring system - Home 
Monitoring®, Closed Loop Stimulation and coveted lead solutions as well as 
state-of-the-art stents, balloons and guide wires for coronary and 
peripheral indications. We highly invest in the development of drug 
eluting devices and are leading the industry with our bioabsorbable metal 
stent program.

This e-mail and the information it contains including attachments are 
confidential and meant only for use by the intended recipient(s); 
disclosure or copying is strictly prohibited. If you are not addressed, 
but in the possession of this e-mail, please notify the sender immediately 
and delete the document.

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message