PT-2008-1680 · Apache · Apache Tomcat

Chitrapandian N · Published 2008-02-08 · Updated 2022-05-01 · CVE-2008-0002

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.0.0 through 6.0.15

Description The issue allows remote attackers to obtain sensitive information when an exception occurs during parameter processing, such as when a client disconnects during this processing. This might cause parameters from one request to be incorrectly processed as part of a subsequent request.

Recommendations For Apache Tomcat versions 6.0.0 through 6.0.15, consider updating to a version where this issue is resolved, as the current version may process parameters in the context of the wrong request if an exception occurs. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-0002

GHSA-5X5F-9R6Q-Q7MH

RHSA-2008:0151

RHSA-2008:0158

RHSA-2008:0213

Affected Products

Apache Tomcat

References · 39

• https://redhat.com/archives/fedora-package-announce/2008-February/msg00315.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-February/msg00460.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200804-10.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0002 · Security Note
• http://marc.info/?l=bugtraq&m=139344343412337&w=2 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5x5f-9r6q-q7mh · Vendor Advisory
• https://github.com/apache/tomcat · Note
• http://securityreason.com/securityalert/3638 · Note
• http://vupen.com/english/advisories/2008/0488 · Note
• http://securityfocus.com/bid/27703 · Note
• http://vupen.com/english/advisories/2008/2780 · Note
• http://secunia.com/advisories/57126 · Note
• http://support.apple.com/kb/HT3216 · Note