PT-2009-5838 · Apache+1 · Apache Tomcat+1

Publicado 2009-11-12 · Atualizado 2019-03-25 · CVE-2009-3548

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 5.5.0 through 5.5.28 Apache Tomcat versions 6.0.0 through 6.0.20

Description The issue arises from the Windows installer for Apache Tomcat using a blank default password for the administrative user. This allows remote attackers to gain privileges. The default configuration creates a user named admin with roles admin and manager and a blank password if not changed during installation.

Recommendations For Apache Tomcat versions 5.5.0 through 5.5.28, change the default password for the administrative user to a secure password. For Apache Tomcat versions 6.0.0 through 6.0.20, change the default password for the administrative user to a secure password. As a temporary workaround, consider changing the default configuration to use a secure password for the admin user until a more permanent solution is applied.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-3548

HPSBUX02541

HPSBUX02860

Produtos afetados

Apache Tomcat

Hp-Ux

Referências · 39

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/hashcollision_dos.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/apache_tomcat_transfer_encoding.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_enum.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16317 · Exploit
• 🔥 https://exploit-db.com/exploits/31433 · Exploit
• http://tomcat.apache.org/security-6.html · Aviso do Fabricante
• http://tomcat.apache.org/security-5.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54182 · Nota
• https://lists.apache.org/thread.html/df497a37fbf98e38d4c83e44829745fe9851b5fde928409c950f80e6%40%3Cdev.tomcat.apache.org%3E · Nota
• http://securityfocus.com/archive/1/516397/100/0/threaded · Nota
• https://tomcat.apache.org/security-6 · Nota