PT-2011-5195 · Apache+4 · Apache Tomcat+4

Publicado 2011-12-05 · Atualizado 2022-05-04 · CVE-2012-0022

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 5.5.x through 5.5.34 Apache Tomcat versions 6.x through 6.0.33 Apache Tomcat versions 7.x through 7.0.22

Description The issue allows remote attackers to cause a denial of service due to CPU consumption via a request containing many parameters and parameter values. This is caused by an inefficient approach to handling parameters. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For Apache Tomcat versions 5.5.x through 5.5.34, update to version 5.5.35 or later. For Apache Tomcat versions 6.x through 6.0.33, update to version 6.0.34 or later. For Apache Tomcat versions 7.x through 7.0.22, update to version 7.0.23 or later.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CESA-2012_0475

CVE-2012-0022

DSA-2401-1

GHSA-8H2Q-QM9X-55JC

HPSBUX02741

HPSBUX02860

RHSA-2012:0074

RHSA-2012:0076

RHSA-2012:0474

RHSA-2012:0475

RHSA-2012:0680

RHSA-2012:0682

RHSA-2012_0474

RHSA-2012_0475

SUSE-SU-2013_1374-1

Produtos afetados

Apache Tomcat

Centos

Hp-Ux

Red Hat

Suse

Referências · 60

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/hashcollision_dos.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_enum.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/apache_tomcat_transfer_encoding.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• https://github.com/apache/tomcat · Nota
• https://github.com/apache/tomcat55/commit/b05497eff4311a9657de6dfc53511d0309eb9db4 · Nota
• https://github.com/apache/tomcat55/commit/0314fe7743cb72e469cb395ccaaf2793a2ea0355 · Nota
• https://github.com/apache/tomcat55/commit/7a1cfb6bd2f849806e7c060dda8648409ad8714e · Nota
• http://marc.info/?l=bugtraq&m=133294394108746&w=2 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2012-01/0112.html · Nota
• https://tomcat.apache.org/security-5 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Aviso do Fabricante