PT-2012-6029 · Apache+1 · Apache Tomcat+1

David Jorm · Published 2012-11-30 · Updated 2021-01-11 · CVE-2012-5568

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions prior to 8.0.0

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon outage, via partial HTTP requests. This can be demonstrated by tools such as Slowloris, which can exploit this issue to overwhelm the server.

Recommendations For Apache Tomcat versions prior to 8.0.0, update to version 8.0.0 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2012-5568

Affected Products

Apache Tomcat

Suse

References · 12

• 🔥 http://captainholly.wordpress.com/2009/06/19/slowloris-vs-tomcat · Exploit
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html · Vendor Advisory
• http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147779.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html · Vendor Advisory
• http://tomcat.10.n6.nabble.com/How-does-Tomcat-handle-a-slow-HTTP-DoS-tc2147776.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-5568 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80317 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5568 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=880011 · Note
• http://openwall.com/lists/oss-security/2012/11/26/2 · Note
• http://securityfocus.com/bid/56686 · Note