PT-2013-4936 · Apache+3 · Apache Tomcat+3

Vincent Danen · Publicado 2013-09-23 · Atualizado 2022-05-14 · CVE-2013-4286

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions prior to 6.0.39 Apache Tomcat versions prior to 7.0.47 Apache Tomcat versions prior to 8.0.0-RC3

Description The issue arises from the improper handling of certain inconsistent HTTP request headers when an HTTP connector or AJP connector is used. This allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via multiple Content-Length headers or a Content-Length header and a "Transfer-Encoding: chunked" header.

Recommendations For Apache Tomcat versions prior to 6.0.39, update to version 6.0.39 or later. For Apache Tomcat versions prior to 7.0.47, update to version 7.0.47 or later. For Apache Tomcat versions prior to 8.0.0-RC3, update to version 8.0.0-RC3 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2014_0429

CVE-2013-4286

DLA-91-1

DSA-2897-1

DSA-3530-1

GHSA-J448-J653-R3VJ

HPSBUX03150

MGASA-2014-0148

MGASA-2014-0149

RHSA-2014:0343

RHSA-2014:0344

RHSA-2014:0429

RHSA-2014:0525

RHSA-2014:0526

RHSA-2014:0686

RHSA-2014_0429

RHSA-2014_0686

USN-2130-1

Produtos afetados

Apache Tomcat

Centos

Hp-Ux

Red Hat

Referências · 89

• https://github.com/apache/tomcat · Nota
• https://github.com/apache/tomcat/commit/41b90b6ebc3e7f898a5a87d197ddf63790d33315 · Nota
• https://github.com/apache/tomcat/commit/7c040003f1387795356605566be7870cf70e05dc · Nota
• https://github.com/apache/tomcat/commit/d0b3e252eb168fafbfb4c3efc16d4192fc8fad6c · Nota
• https://github.com/apache/tomcat/commit/bcce3e4997a4ed06fe03e2517443f3ad8ade2dfa · Nota
• https://github.com/apache/tomcat80/commit/ff00954b78e6484e40f323c0cef2e6d95c2882b9 · Nota
• http://rhn.redhat.com/errata/RHSA-2014-0344.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2014-0345.html · Aviso do Fabricante
• https://tomcat.apache.org/security-8 · Nota
• https://web.archive.org/web/20141230041748/http://seclists.org/fulldisclosure/2014/Dec/23 · Nota
• http://ubuntu.com/usn/USN-2130-1 · Aviso do Fabricante
• https://web.archive.org/web/20161024215639/http://secunia.com/advisories/59722 · Nota
• https://cve.org/CVERecord?id=CVE-2013-4286 · Nota de Segurança
• https://web.archive.org/web/20161014054543/http://www-01.ibm.com/support/docview.wss?uid=swg21678231 · Nota
• https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E · Nota