Lucene search
Ubuntu.comUB:CVE-2007-5333HistoryFeb 12, 2008 - 12:00 a.m.
CVE-2007-5333
2008-02-1200:00:00
ubuntu.com
ubuntu.com
17
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.125
Percentile
95.5%
Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through
4.1.36 does not properly handle (1) double quote (") characters or (2) %5C
(encoded backslash) sequences in a cookie value, which might cause
sensitive information such as session IDs to be leaked to remote attackers
and enable session hijacking attacks. NOTE: this issue exists because of an
incomplete fix for CVE-2007-3385.
Bugs
Related
cvelist
cvelist
CVE-2007-5333
2008-02-12 00:00:00
CVE-2007-3385
2007-08-14 22:00:00
jvn
jvn
JVN#09470767 Apache Tomcat fails to properly handle cookie value
2008-02-12 00:00:00
osv
osv
Exposure of Sensitive Information in Apache Tomcat
2022-05-01 18:32:19
Apache Tomcat Mishandles Character Sequence in Cookies
2022-05-01 18:13:14
tomcat5 - several vulnerabilities
2008-01-07 00:00:00
nvd
nvd
CVE-2007-5333
2008-02-12 01:00:00
CVE-2007-3385
2007-08-14 22:17:00
github
github
Exposure of Sensitive Information in Apache Tomcat
2022-05-01 18:32:19
Apache Tomcat Mishandles Character Sequence in Cookies
2022-05-01 18:13:14
veracode
veracode
Session Hijacking
2018-11-12 08:37:47
Information Disclosure
2019-03-25 08:40:44
Session Hijacking
2018-11-13 05:10:16
exploitdb
exploitdb
Apache Tomcat 6.0.15 - Cookie Quote Handling Remote Information Disclosure
2008-02-09 00:00:00
cve
cve
CVE-2007-5333
2008-02-12 01:00:00
CVE-2007-3385
2007-08-14 22:17:00
prion
prion
Code injection
2008-02-12 01:00:00
Design/Logic Flaw
2007-08-14 22:17:00
exploitpack
exploitpack
Apache Tomcat 6.0.15 - Cookie Quote Handling Remote Information Disclosure
2008-02-09 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 5.5.26
2008-02-05 00:00:00
Fixed in Apache Tomcat 6.0.16
2008-02-08 00:00:00
Fixed in Apache Tomcat 4.1.37
2005-10-06 00:00:00
seebug
seebug
Apache Tomcat <= 6.0.15 Cookie Quote Handling Remote Information Disclosure Vulnerability
2014-07-01 00:00:00
Apache Tomcatε€δΈͺθΏη¨δΏ‘ζ―ζ³ι²ζΌζ΄
2007-08-23 00:00:00
ubuntucve
ubuntucve
CVE-2007-3385
2007-08-14 00:00:00
securityvulns
securityvulns
CVE-2007-3385: Handling of \" in cookies
2007-08-14 00:00:00
Apache Tomcat multiple security vulnerabilities
2007-08-14 00:00:00
HP Network Node Manager multiple security vulnerabilities
2013-07-29 00:00:00
nessus
nessus
Apache Tomcat < 5.5.26 Multiple Vulnerabilities
2010-07-01 00:00:00
Mandriva Linux Security Advisory : tomcat5 (MDVSA-2009:018)
2009-04-23 00:00:00
Apache Tomcat 6.0.x < 6.0.16 Information Disclosure
2008-02-08 00:00:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:018 (tomcat5)
2009-01-20 00:00:00
Mandrake Security Advisory MDVSA-2009:018 (tomcat5)
2009-01-20 00:00:00
Debian Security Advisory DSA 1453-1 (tomcat5)
2008-01-17 00:00:00
redhat
redhat
(RHSA-2007:0871) Moderate: tomcat security update
2007-09-26 00:00:00
(RHSA-2008:0195) Moderate: tomcat security update
2008-04-28 00:00:00
centos
centos
tomcat5 security update
2007-09-28 08:11:50
tomcat5 security update
2009-07-29 17:30:22
debian
debian
[SECURITY] [DSA 1453-1] New tomcat5 packages fix several vulnerabilities
2008-01-07 18:41:20
[SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities
2008-01-03 21:54:49
oraclelinux
oraclelinux
Moderate: tomcat security update
2007-09-26 00:00:00
tomcat security update
2009-07-21 00:00:00
atlassian
atlassian
Upgrade standalone Tomcat to 5.5.25
2008-01-15 04:23:59
Upgrade standalone Tomcat to 5.5.25
2008-01-15 04:23:59
fedora
fedora
[SECURITY] Fedora 8 Update: tomcat5-5.5.26-1jpp.2.fc8
2008-02-13 05:14:35
[SECURITY] Fedora 7 Update: tomcat5-5.5.26-1jpp.2.fc7
2008-02-13 04:55:03
[SECURITY] Fedora 8 Update: tomcat5-5.5.27-0jpp.2.fc8
2008-09-16 23:28:35
gentoo
gentoo
Tomcat: Multiple vulnerabilities
2008-04-10 00:00:00
altlinux
altlinux
vmware
vmware
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
ibm
ibm
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.125
Percentile
95.5%
Related for UB:CVE-2007-5333