PT-2012-4222 · Apache+2 · Apache Tomcat+2

Josh Spiewak · Publicado 2012-10-19 · Atualizado 2017-09-19 · CVE-2012-2733

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.0.0 through 6.0.35 Apache Tomcat versions 7.0.0 through 7.0.27

Description The issue is related to the HTTP NIO connector, where the request-header size is not properly restricted. This allows remote attackers to cause a denial of service by consuming memory via a large amount of header data. The checks that limited the permitted size of request headers were implemented too late in the request parsing process, enabling a malicious user to trigger an OutOfMemoryError by sending a single request with very large headers.

Recommendations For Apache Tomcat versions 6.0.0 through 6.0.35, update to version 6.0.36 or later. For Apache Tomcat versions 7.0.0 through 7.0.27, update to version 7.0.28 or later.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-2733

HPSBUX02866

RHSA-2013:0266

SUSE-SU-2013_0226-1

Produtos afetados

Apache Tomcat

Hp-Ux

Suse

Referências · 61

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• 🔥 https://github.com/mpgn/CRIME-poc · Exploit
• https://github.com/anthophilee/A2SV--SSL-VUL-Scan · Nota
• http://support.novell.com/security/cve/CVE-2012-5886.html · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://bugzilla.novell.com/793394 · Nota
• http://download.novell.com/patch/finder/?keywords=10aa6410688bd05f48407e1b055f53e6 · Nota
• http://tomcat.apache.org/security-6.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=139344343412337&w=2 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2687 · Nota de Segurança
• https://bugzilla.novell.com/793391 · Nota
• http://tomcat.apache.org/security-7.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4534 · Nota de Segurança
• http://support.novell.com/security/cve/CVE-2012-4431.html · Nota
• http://support.novell.com/security/cve/CVE-2012-5885.html · Nota