PT-2012-1967 · Apache+4 · Apache Tomcat+4

Alexander Klink + 1 · Publicado 2012-01-05 · Atualizado 2022-05-14 · CVE-2011-4858

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions prior to 5.5.35 Apache Tomcat versions 6.x prior to 6.0.35 Apache Tomcat versions 7.x prior to 7.0.23

Description The issue allows remote attackers to cause a denial of service by sending many crafted parameters, resulting in CPU consumption due to hash collisions.

Recommendations For versions prior to 5.5.35, update to version 5.5.35 or later. For versions 6.x prior to 6.0.35, update to version 6.0.35 or later. For versions 7.x prior to 7.0.23, update to version 7.0.23 or later.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-399

CWE-20

Identificadores relacionados

CESA-2012_0475

CVE-2011-4858

DSA-2401-1

GHSA-WR3M-GW98-MC3J

HPSBUX02741

HPSBUX02860

RHSA-2012:0074

RHSA-2012:0076

RHSA-2012:0474

RHSA-2012:0475

RHSA-2012:0680

RHSA-2012:0682

RHSA-2012_0474

RHSA-2012_0475

SUSE-SU-2012_0144-1

Produtos afetados

Apache Tomcat

Centos

Hp-Ux

Red Hat

Suse

Referências · 39

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/hashcollision_dos.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_enum.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/apache_tomcat_transfer_encoding.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• 🔥 https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py · Exploit
• 🔥 https://exploit-db.com/exploits/2012 · Exploit
• https://github.com/apache/tomcat · Nota
• http://marc.info/?l=bugtraq&m=133294394108746&w=2 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=136485229118404&w=2 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=132871655717248&w=2 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-4858 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2012-0074.html · Aviso do Fabricante