Many time consuming directory listing requests can cause a denial of service in Apache Tomcat versions 5.5.0 through 5.5.11.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41335/tomcat550.txt
Source: https://packetstormsecurity.com/files/41335/tomcat550.txt.html