PT-2009-5838 · Apache+1 · Apache Tomcat+1

Published 2009-11-12 · Updated 2019-03-25 · CVE-2009-3548

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 5.5.0 through 5.5.28 Apache Tomcat versions 6.0.0 through 6.0.20

Description The issue arises from the Windows installer for Apache Tomcat using a blank default password for the administrative user. This allows remote attackers to gain privileges. The default configuration creates a user named admin with roles admin and manager and a blank password if not changed during installation.

Recommendations For Apache Tomcat versions 5.5.0 through 5.5.28, change the default password for the administrative user to a secure password. For Apache Tomcat versions 6.0.0 through 6.0.20, change the default password for the administrative user to a secure password. As a temporary workaround, consider changing the default configuration to use a secure password for the admin user until a more permanent solution is applied.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2009-3548

HPSBUX02541

HPSBUX02860

Affected Products

Apache Tomcat

Hp-Ux

References · 39

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/hashcollision_dos.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/apache_tomcat_transfer_encoding.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_enum.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16317 · Exploit
• 🔥 https://exploit-db.com/exploits/31433 · Exploit
• http://tomcat.apache.org/security-6.html · Vendor Advisory
• http://tomcat.apache.org/security-5.html · Vendor Advisory
• http://vupen.com/english/advisories/2009/3185 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3548 · Security Note
• http://marc.info/?l=bugtraq&m=139344343412337&w=2 · Vendor Advisory