PT-2011-3158 · Apache · Apache Tomcat

Brad Plies · Published 2011-04-06 · Updated 2022-05-17 · CVE-2011-1475

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.0.0 through 7.0.11

Description The issue arises from the HTTP BIO connector in Apache Tomcat not properly handling HTTP pipelining. This allows remote attackers to potentially read responses intended for other clients by examining the application data in HTTP packets. The problem is related to a mix-up of responses for requests from different users. Changes introduced to support Servlet 3.0 asynchronous requests did not fully account for HTTP pipelining, leading to unexpected behaviors including the mixing up of responses between requests. While the mix-up in responses was primarily observed between requests from the same user, there is a possibility that responses could be mixed up between requests from different users.

Recommendations For Apache Tomcat versions 7.0.0 through 7.0.11, update to version 7.0.12 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-1475

GHSA-H6C8-RG87-F3PC

Affected Products

Apache Tomcat

References · 22

• http://svn.apache.org/viewvc?view=revision&revision=1086352 · Patch
• http://svn.apache.org/viewvc?view=revision&revision=1086349 · Patch
• https://osv.dev/vulnerability/GHSA-h6c8-rg87-f3pc · Vendor Advisory
• http://tomcat.apache.org/security-7.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1475 · Security Note
• https://github.com/apache/tomcat · Note
• https://github.com/apache/tomcat/commit/fd8a579e0e2379a84826b11700adf396e4ed2041 · Note
• https://github.com/apache/tomcat/commit/d2e8f2ede7dea39f75f68384f331f38f094e4ed3 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66676 · Note
• https://web.archive.org/web/20170317142459/http://securitytracker.com/id?1025303 · Note
• http://securityfocus.com/bid/47199 · Note
• https://web.archive.org/web/20170202012852/http://securityfocus.com/archive/1/517363 · Note
• https://web.archive.org/web/20120605200856/http://securityfocus.com/bid/47199 · Note
• http://securitytracker.com/id?1025303 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12374 · Note