PT-2011-2012 · Apache+2 · Apache Tomcat+2

Publicado 2011-01-13 · Atualizado 2023-02-13 · CVE-2011-0013

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 5.5 before 5.5.32 Apache Tomcat versions 6.0 before 6.0.30 Apache Tomcat versions 7.0 before 7.0.6

Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to the execution of scripts by an administrative user when viewing the manager pages. This is possible because the HTML Manager interface displays web application-provided data, such as display names, without proper filtering.

Recommendations For Apache Tomcat version 5.5 before 5.5.32, update to version 5.5.32 or later. For Apache Tomcat version 6.0 before 6.0.30, update to version 6.0.30 or later. For Apache Tomcat version 7.0 before 7.0.6, update to version 7.0.6 or later.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-0013

DSA-2160-1

GHSA-3P86-XGRQ-M6P6

HPSBUX02645

HPSBUX02725

HPSBUX02860

RHSA-2011:0791

RHSA-2011:0897

RHSA-2011:1845

RHSA-2011_0791

RHSA-2011_1845

Produtos afetados

Apache Tomcat

Hp-Ux

Red Hat

Referências · 65

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/hashcollision_dos.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_enum.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/apache_tomcat_transfer_encoding.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• 🔥 http://securitytracker.com/id?1025026 · Exploit
• https://github.com/apache/tomcat · Nota
• https://github.com/apache/tomcat/commit/58223c5ecc0751c3642c810f291b8f033d33b97f · Nota
• https://github.com/apache/tomcat55/commit/863d77c7d321245de019ac32252828e0a025c5b4 · Nota
• https://linux.oracle.com/errata/ELSA-2011-0791.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0013 · Nota de Segurança
• https://web.archive.org/web/20111227000129/http://secunia.com/advisories/45022 · Nota
• http://marc.info/?l=bugtraq&m=132215163318824&w=2 · Aviso do Fabricante