Re: how to test hash collision security fix in tomcat 7.1

2012/5/31 manjesh : > Hi, > The exact version of tomcat I am working with is 7.0.27 > > I am verifying the fix discussed here > > http://news.softpedia.com/news/Apache-Tomcat-Workaround-for-Hashtable-Collision-DoS-Vulnerability-243544.shtml > > > Here is the snippet of implementation  [ ... ] 1. T

Re: how to test hash collision security fix in tomcat 7.1

Hi, The exact version of tomcat I am working with is 7.0.27 I am verifying the fix discussed here http://news.softpedia.com/news/Apache-Tomcat-Workaround-for-Hashtable-Collision-DoS-Vulnerability-243544.shtml Here is the snippet of implementation [ org.apache.tomcat.util.http.Parameters.java]

Re: how to test hash collision security fix in tomcat 7.1

2012/5/30 manjesh : > Hi , > I have downloaded tomcat 7.1 for Windows OS > 1. There is no such version. I do not know what you are testing. > added the following parameter (maxParameterCoun)  into server.xml > >                connectionTimeout="2" >              redirectPort="8443" maxParame

how to test hash collision security fix in tomcat 7.1

Hi , I have downloaded tomcat 7.1 for Windows OS added the following parameter (maxParameterCoun) into server.xml restarted the server. to test this fix , I created a JSP with 6 text fields having same name ( example 6 input boxes ) when I give input for all of these input fields and c