IOActive Security Advisory – mod_jk2 versions prior to 2.0.4 are vulnerable to multiple stack overflow vulnerabilities. Specifically, IOActive has discovered multiple locations where these vulnerabilities are exploitable via the Host request header in any given request. These overflows all result in remote code execution under the user of the running Apache process.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/63523/ioactive-modjk2.txt
Source: https://packetstormsecurity.com/files/63523/ioactive-modjk2.txt.html