Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable800607.PRM
HistoryFeb 22, 2012 - 12:00 a.m.

Apache Tomcat 6.0.x < 6.0.35 Multiple Vulnerabilities

2012-02-2200:00:00
Tenable
www.tenable.com
11
JSON

Versions of Apache Tomcat 6.0.35 are potentially affected by multiple vulnerabilities :

  • Specially crafted requests are incorrectly processed by Tomcat and can cause the server to allow injection of arbitrary AJP messages. This can lead to authentication bypass and disclosure of sensitive information. Note this vulnerability only occurs when the following are true (CVE-2011-3190):

    • the org.apache.jk.server.JkCoyoteHandler AJP connector is not used.
    • POST requests are accepted.
    • Large numbers of crafted form parameters can cause excessive CPU consumption due to hash collisions. (CVE-2011-4858, CVE-2012-0022)
      IAVB Reference : 2012-B-0035
      STIG Finding Severity : Category I
Binary data 800607.prm

Related

nessus 46
openvas 48
centos 3
ubuntucve 3
osv 4
redhat 12
github 3
cve 4
prion 3
debiancve 3
oraclelinux 3
tomcat 5
ubuntu 2
checkpoint_advisories 1
securityvulns 8
seebug 2
freebsd 1
debian 1
fedora 4
ibm 8
amazon 1
vmware 2
exploitpack 1
gentoo 1
oracle 1
nessus
nessus
Apache Tomcat 6.0.x < 6.0.35 Multiple Vulnerabilities
2012-02-22 00:00:00
Apache Tomcat 6.x < 6.0.35 Multiple Vulnerabilities
2011-12-12 00:00:00
Apache Tomcat 7.x < 7.0.23 Hash Collision DoS
2012-01-13 00:00:00
openvas
openvas
RedHat Update for tomcat5 RHSA-2012:0474-01
2012-04-13 00:00:00
RedHat Update for tomcat6 RHSA-2012:0475-01
2012-07-09 00:00:00
FreeBSD Ports: tomcat
2012-02-12 00:00:00
centos
centos
tomcat6 security update
2012-04-11 20:13:41
tomcat5 security update
2012-04-11 19:16:37
tomcat6 security update
2011-12-22 16:00:12
ubuntucve
ubuntucve
CVE-2012-0022
2012-01-18 00:00:00
CVE-2011-4858
2012-01-05 00:00:00
CVE-2011-3190
2011-08-31 00:00:00
osv
osv
Denial of Service in Apache Tomcat
2022-05-04 00:27:43
Improper Input Validation in Apache Tomcat
2022-05-14 03:52:45
Apache Tomcat Allows Remote Attackers to Spoof AJP Requests
2022-05-14 01:17:02
redhat
redhat
(RHSA-2012:0475) Moderate: tomcat6 security update
2012-04-11 00:00:00
(RHSA-2012:0474) Moderate: tomcat5 security update
2012-04-11 00:00:00
(RHSA-2012:0679) Moderate: tomcat5 security and bug fix update
2012-05-21 16:19:01
github
github
Denial of Service in Apache Tomcat
2022-05-04 00:27:43
Apache Tomcat Allows Remote Attackers to Spoof AJP Requests
2022-05-14 01:17:02
Improper Input Validation in Apache Tomcat
2022-05-14 03:52:45
cve
cve
CVE-2012-0022
2012-01-19 04:01:00
CVE-2011-3190
2011-08-31 23:55:00
CVE-2011-4858
2012-01-05 19:55:00
prion
prion
Design/Logic Flaw
2012-01-19 04:01:00
Code injection
2012-01-05 19:55:00
Authentication flaw
2011-08-31 23:55:00
debiancve
debiancve
CVE-2012-0022
2012-01-19 04:01:00
CVE-2011-4858
2012-01-05 19:55:00
CVE-2011-3190
2011-08-31 23:55:00
oraclelinux
oraclelinux
tomcat6 security update
2012-04-11 00:00:00
tomcat5 security update
2012-04-11 00:00:00
tomcat6 security and bug fix update
2011-12-05 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 6.0.35
2011-12-05 00:00:00
Fixed in Apache Tomcat 7.0.21
2011-09-01 00:00:00
Fixed in Apache Tomcat 5.5.35
2012-01-16 00:00:00
ubuntu
ubuntu
Tomcat vulnerabilities
2012-02-13 00:00:00
Tomcat vulnerabilities
2011-11-08 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Tomcat Parameter Hash Collision Denial of Service - Ver2 (CVE-2011-4858)
2014-04-16 00:00:00
securityvulns
securityvulns
Apache Tomcat information leakage and unauthorized access
2011-08-30 00:00:00
[SECURITY] CVE-2011-3190 Apache Tomcat Authentication bypass and information disclosure
2011-08-30 00:00:00
Apache Tomcat security vulnerabilities
2012-01-20 00:00:00
seebug
seebug
Apache Tomcat Large Number Denial Of Service
2012-01-18 00:00:00
PHP Hash Table Collision Proof Of Concept
2014-07-01 00:00:00
freebsd
freebsd
tomcat -- Denial of Service
2011-10-21 00:00:00
debian
debian
[SECURITY] [DSA 2401-1] tomcat6 security update
2012-02-02 19:29:50
fedora
fedora
[SECURITY] Fedora 16 Update: tomcat6-6.0.32-17.fc16
2011-10-19 04:35:58
[SECURITY] Fedora 15 Update: tomcat6-6.0.32-8.fc15
2011-10-20 09:58:03
[SECURITY] Fedora 15 Update: tomcat6-6.0.32-10.fc15
2011-11-10 17:33:27
ibm
ibm
Security Bulletin: Tivoli Key Lifecycle Manager can be affected by multiple vulnerabilities in Tivoli Integrated Portal (CVE-2013-0464, CVE-2012-3325, CVE-2011-4858)
2022-09-25 21:06:56
Security Bulletin: Tivoli Workload Dynamic Console Vulnerability exposure in Tivoli Integrated Portal component
2022-09-26 03:29:56
Security Bulletin: Storwize V7000 Unified V1.3.2.3 and V1.4.0.0 Include Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
amazon
amazon
Important: tomcat6
2011-12-02 22:21:00
vmware
vmware
VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, Workstation, Player, ESXi and ESX address several security issues
2012-03-15 00:00:00
VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues
2012-03-15 00:00:00
exploitpack
exploitpack
PHP Hash Table Collision - Denial of Service (PoC)
2012-01-03 00:00:00
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2013
2013-01-15 00:00:00
JSON
Related for 800607.PRM
nessus46openvas48centos3ubuntucve3osv4redhat12github3cve4prion3debiancve3oraclelinux3tomcat5ubuntu2checkpoint_advisories1securityvulns8seebug2freebsd1debian1fedora4ibm8amazon1vmware2exploitpack1gentoo1oracle1