Lucene search
Ubuntu.comUB:CVE-2007-6286HistoryFeb 12, 2008 - 12:00 a.m.
CVE-2007-6286
2008-02-1200:00:00
ubuntu.com
ubuntu.com
10
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.047 Low
EPSS
Percentile
92.5%
Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the
native APR connector is used, does not properly handle an empty request to
the SSL port, which allows remote attackers to trigger handling of โa
duplicate copy of one of the recent requests,โ as demonstrated by using
netcat to send the empty request.
Notes
| Author | Note |
|---|---|
| fujitsu | At least 5.5 doesnโt use the native APR connector. |
Related
prion
prion
Server side request forgery (ssrf)
2008-02-12 01:00:00
osv
osv
Apache Tomcat Does Not Properly Handle Empty Requests
2022-05-01 18:41:17
veracode
veracode
Replay Attack
2018-11-09 05:47:09
github
github
Apache Tomcat Does Not Properly Handle Empty Requests
2022-05-01 18:41:17
cve
cve
CVE-2007-6286
2008-02-12 01:00:00
seebug
seebug
Apache Tomcat้ๅค่ฏทๆฑๅค็ๅฎๅ
จๆผๆด(CVE-2007-6286)
2012-09-27 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200804-10 (tomcat)
2008-09-24 00:00:00
Fedora Update for tomcat5 FEDORA-2008-1603
2009-02-16 00:00:00
Fedora Update for tomcat5 FEDORA-2008-1467
2009-02-16 00:00:00
gentoo
gentoo
Tomcat: Multiple vulnerabilities
2008-04-10 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 5.5.26
2008-02-05 00:00:00
Fixed in Apache Tomcat 6.0.16
2008-02-08 00:00:00
nessus
nessus
Apache Tomcat < 5.5.26 Multiple Vulnerabilities
2010-07-01 00:00:00
GLSA-200804-10 : Tomcat: Multiple vulnerabilities
2008-04-17 00:00:00
Apache Tomcat 6.0.x < 6.0.16 Information Disclosure
2008-02-08 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: tomcat5-5.5.26-1jpp.2.fc7
2008-02-13 04:55:03
[SECURITY] Fedora 8 Update: tomcat5-5.5.26-1jpp.2.fc8
2008-02-13 05:14:35
[SECURITY] Fedora 8 Update: tomcat5-5.5.27-0jpp.2.fc8
2008-09-16 23:28:35
vmware
vmware
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.047 Low
EPSS
Percentile
92.5%
Related for UB:CVE-2007-6286