rapid7/metasploit-framework — pull request #3026 by ribeirux (2014-02-22 14:16:22+00:00)
Title: Add module for CVE-2014-0050

This module triggers an infinite loop in Apache Commons FileUpload via a Content-Type header.
Apache Tomcat 7 and Apache Tomcat 8 are also affect by this issue.

For more details check:
- https://mail-archives.apache.org/mod_mbox/www-announce/201402.mbox/%3C52F373FC.9030907@apache.org%3E
- http://tomcat.apache.org/security-8.html
- http://tomcat.apache.org/security-7.html

Verification
--------------
- Install apache tomcat 7.0.50
- Create a servlet that processes mime-multipart requests ( e.g. https://www.openshift.com/blogs/multipart-forms-and-file-uploads-with-tomcat-7)
- Run exploit