CVE ID:	CVE-2011-0534
Description:	Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request.
Test IDs:	1.3.6.1.4.1.25623.1.0.68994   1.3.6.1.4.1.25623.1.0.70534   1.3.6.1.4.1.25623.1.0.803782
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0534 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html BugTraq ID: 46164 http://www.securityfocus.com/bid/46164 Bugtraq: 20110205 [SECURITY] CVE-2011-0534 Apache Tomcat DoS vulnerability (Google Search) http://www.securityfocus.com/archive/1/516214/100/0/threaded Debian Security Information: DSA-2160 (Google Search) http://www.debian.org/security/2011/dsa-2160 HPdes Security Advisory: HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 http://osvdb.org/70809 http://www.securitytracker.com/id?1025027 http://secunia.com/advisories/43192 http://secunia.com/advisories/45022 http://secunia.com/advisories/57126 http://securityreason.com/securityalert/8074 SuSE Security Announcement: SUSE-SR:2011:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html http://www.vupen.com/english/advisories/2011/0293 XForce ISS Database: tomcat-nio-connector-dos(65162) https://exchange.xforce.ibmcloud.com/vulnerabilities/65162