PT-2007-4660 · Apache+2 · Apache Tomcat+2

Published 2007-08-14 · Updated 2022-05-01 · CVE-2007-3385

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 3.3 to 3.3.2 Apache Tomcat versions 4.1.0 to 4.1.36 Apache Tomcat versions 5.0.0 to 5.0.30 Apache Tomcat versions 5.5.0 to 5.5.24 Apache Tomcat versions 6.0.0 to 6.0.13

Description The issue arises from improper handling of the `` character sequence in a cookie value, potentially leading to the leakage of sensitive information such as session IDs to remote attackers. This could enable session hijacking attacks.

Recommendations For Apache Tomcat versions 3.3 to 3.3.2, update to a version that properly handles the character sequence in cookie values. For Apache Tomcat versions 4.1.0 to 4.1.36, update to a version that properly handles the character sequence in cookie values. For Apache Tomcat versions 5.0.0 to 5.0.30, update to a version that properly handles the character sequence in cookie values. For Apache Tomcat versions 5.5.0 to 5.5.24, update to a version that properly handles the character sequence in cookie values. For Apache Tomcat versions 6.0.0 to 6.0.13, update to a version that properly handles the `` character sequence in cookie values.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2007-3385

DSA-1447-1

DSA-1453-1

GHSA-6J8F-66VH-39MJ

HPSBUX02262

RHSA-2007:0871

RHSA-2007:0876

RHSA-2007:0950

RHSA-2007:1069

RHSA-2007_0871

RHSA-2008:0195

RHSA-2008:0261

RHSA-2008:0524

RHSA-2010:0602

Affected Products

Apache Tomcat

Hp-Ux

Red Hat

References · 91

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apache_modjk_overflow.rb · Exploit
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:241 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562 · Vendor Advisory
• http://kb.cert.org/vuls/id/993544 · Patch
• http://redhat.com/support/errata/RHSA-2007-0950.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3385 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2450 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09579 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2007-November/msg00525.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0195.html · Vendor Advisory