Ubuntu.comUB:CVE-2011-3375CVE-2011-3375
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
Percentile
65.1%
Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly
perform certain caching and recycling operations involving request objects,
which allows remote attackers to obtain unintended read access to IP
address and HTTP header information in opportunistic circumstances by
reading TCP data.
Bugs
- <https://issues.apache.org/bugzilla/show_bug.cgi?id=51872>
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3375>
Notes
| Author | Note |
|---|---|
| mdeslaur | advisory says Tomcat 6.0.30 to 6.0.33 |
References
seclists.org/fulldisclosure/2012/Jan/236
tomcat.apache.org/security-6.html
tomcat.apache.org/security-7.html
tomcat.apache.org/security.html
launchpad.net/bugs/cve/CVE-2011-3375
nvd.nist.gov/vuln/detail/CVE-2011-3375
security-tracker.debian.org/tracker/CVE-2011-3375
ubuntu.com/security/notices/USN-1359-1
www.cve.org/CVERecord?id=CVE-2011-3375
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
Percentile
65.1%