Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2011-3375
HistoryJan 19, 2012 - 4:01 a.m.

CVE-2011-3375

2012-01-1904:01:00
Debian Security Bug Tracker
security-tracker.debian.org
6

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.

OSVersionArchitecturePackageVersionFilename
Debian9alltomcat7<ย 7.0.75-1tomcat7_7.0.75-1_all.deb

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N