PT-2011-3158 · Apache · Apache Tomcat

Brad Plies · Publicado 2011-04-06 · Atualizado 2022-05-17 · CVE-2011-1475

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.0.0 through 7.0.11

Description The issue arises from the HTTP BIO connector in Apache Tomcat not properly handling HTTP pipelining. This allows remote attackers to potentially read responses intended for other clients by examining the application data in HTTP packets. The problem is related to a mix-up of responses for requests from different users. Changes introduced to support Servlet 3.0 asynchronous requests did not fully account for HTTP pipelining, leading to unexpected behaviors including the mixing up of responses between requests. While the mix-up in responses was primarily observed between requests from the same user, there is a possibility that responses could be mixed up between requests from different users.

Recommendations For Apache Tomcat versions 7.0.0 through 7.0.11, update to version 7.0.12 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-1475

GHSA-H6C8-RG87-F3PC

Produtos afetados

Apache Tomcat

Referências · 22

• https://github.com/apache/tomcat · Nota
• https://github.com/apache/tomcat/commit/fd8a579e0e2379a84826b11700adf396e4ed2041 · Nota
• https://github.com/apache/tomcat/commit/d2e8f2ede7dea39f75f68384f331f38f094e4ed3 · Nota
• http://svn.apache.org/viewvc?view=revision&revision=1086352 · Correção
• http://svn.apache.org/viewvc?view=revision&revision=1086349 · Correção
• https://osv.dev/vulnerability/GHSA-h6c8-rg87-f3pc · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66676 · Nota
• https://web.archive.org/web/20170317142459/http://securitytracker.com/id?1025303 · Nota
• http://securityfocus.com/bid/47199 · Nota
• http://tomcat.apache.org/security-7.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-1475 · Nota de Segurança
• https://web.archive.org/web/20170202012852/http://securityfocus.com/archive/1/517363 · Nota
• https://web.archive.org/web/20120605200856/http://securityfocus.com/bid/47199 · Nota
• http://securitytracker.com/id?1025303 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12374 · Nota