Check Point Advisories

Apache Tomcat FileUpload Content-Type Header Infinite Loop (CVE-2014-0050)

Vulnerability
Protection

Check Point Reference:	CPAI-2014-1094
Date Published:	16 Mar 2014
Severity:	Critical
Last Updated:	Sunday 16 March, 2014
Source:	CVE-2014-0050
Protection Provided by:	Security Gateway R75 and above
Who is Vulnerable?	Apache Software Foundation Commons FileUpload 1.0 to 1.3
Vulnerability Description	An infinite loop vulnerability exists in Apache Tomcat. The vulnerability is due to insufficient boundary checks when processing the Content-Type header of a multipart request. A remote attacker could exploit this vulnerability by sending a large amount of data to the server causing it to use up excessive resources.

Protection Overview

This protection will detect and block attempts to exploit this vulnerability.

In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, Protection tab and select the version of your choice.

Security Gateway R70 / R71 / R75 and above

In the IPS tab, click Protections and find the Apache Tomcat FileUpload Content-Type Header Infinite Loop protection using the Search tool and Edit the protection's settings.
Install policy on all modules.

SmartView Tracker will log the following entries:

Attack Name:  Apache Server Protection Violation.
Attack Information:  Apache Tomcat FileUpload Content-Type Header Infinite Loop