PT-2012-1967 · Apache+4 · Apache Tomcat+4

Alexander Klink + 1 · Published 2012-01-05 · Updated 2022-05-14 · CVE-2011-4858

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions prior to 5.5.35 Apache Tomcat versions 6.x prior to 6.0.35 Apache Tomcat versions 7.x prior to 7.0.23

Description The issue allows remote attackers to cause a denial of service by sending many crafted parameters, resulting in CPU consumption due to hash collisions.

Recommendations For versions prior to 5.5.35, update to version 5.5.35 or later. For versions 6.x prior to 6.0.35, update to version 6.0.35 or later. For versions 7.x prior to 7.0.23, update to version 7.0.23 or later.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-399

CWE-20

Related Identifiers

CESA-2012_0475

CVE-2011-4858

DSA-2401-1

GHSA-WR3M-GW98-MC3J

HPSBUX02741

HPSBUX02860

RHSA-2012:0074

RHSA-2012:0076

RHSA-2012:0474

RHSA-2012:0475

RHSA-2012:0680

RHSA-2012:0682

RHSA-2012_0474

RHSA-2012_0475

SUSE-SU-2012_0144-1

Affected Products

Apache Tomcat

Centos

Hp-Ux

Red Hat

Suse

References · 39

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/hashcollision_dos.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_enum.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/apache_tomcat_transfer_encoding.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• 🔥 https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py · Exploit
• 🔥 https://exploit-db.com/exploits/2012 · Exploit
• http://marc.info/?l=bugtraq&m=133294394108746&w=2 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=136485229118404&w=2 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=132871655717248&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-4858 · Security Note
• http://rhn.redhat.com/errata/RHSA-2012-0074.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0075.html · Vendor Advisory