PT-2012-6029 · Apache+1 · Apache Tomcat+1

David Jorm · Publicado 2012-11-30 · Atualizado 2021-01-11 · CVE-2012-5568

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions prior to 8.0.0

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon outage, via partial HTTP requests. This can be demonstrated by tools such as Slowloris, which can exploit this issue to overwhelm the server.

Recommendations For Apache Tomcat versions prior to 8.0.0, update to version 8.0.0 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2012-5568

Produtos afetados

Apache Tomcat

Suse

Referências · 12

• 🔥 http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat · Exploit
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80317 · Nota
• http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147779.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html · Aviso do Fabricante
• http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147776.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-5568 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5568 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=880011 · Nota
• http://openwall.com/lists/oss-security/2012/11/26/2 · Nota
• http://securityfocus.com/bid/56686 · Nota