PT-2011-5195 · Apache+4 · Apache Tomcat+4

Published 2011-12-05 · Updated 2022-05-04 · CVE-2012-0022

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 5.5.x through 5.5.34 Apache Tomcat versions 6.x through 6.0.33 Apache Tomcat versions 7.x through 7.0.22

Description The issue allows remote attackers to cause a denial of service due to CPU consumption via a request containing many parameters and parameter values. This is caused by an inefficient approach to handling parameters. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For Apache Tomcat versions 5.5.x through 5.5.34, update to version 5.5.35 or later. For Apache Tomcat versions 6.x through 6.0.33, update to version 6.0.34 or later. For Apache Tomcat versions 7.x through 7.0.22, update to version 7.0.23 or later.

Exploit

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CESA-2012_0475

CVE-2012-0022

DSA-2401-1

GHSA-8H2Q-QM9X-55JC

HPSBUX02741

HPSBUX02860

RHSA-2012:0074

RHSA-2012:0076

RHSA-2012:0474

RHSA-2012:0475

RHSA-2012:0680

RHSA-2012:0682

RHSA-2012_0474

RHSA-2012_0475

SUSE-SU-2013_1374-1

Affected Products

Apache Tomcat

Centos

Hp-Ux

Red Hat

Suse

References · 60

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/hashcollision_dos.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_enum.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/apache_tomcat_transfer_encoding.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• http://marc.info/?l=bugtraq&m=133294394108746&w=2 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Vendor Advisory
• http://tomcat.apache.org/security-6.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0074.html · Vendor Advisory
• http://tomcat.apache.org/security-5.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0325.html · Vendor Advisory
• http://tomcat.apache.org/security-7.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0078.html · Vendor Advisory