Apache Tomcat 6.0.x < 6.0.35 Multiple Vulnerabilities
high Log Correlation Engine Plugin ID 800607
Synopsis
The remote web server is affected by a denial of service vulnerability.Description
Versions of Apache Tomcat 6.0.35 are potentially affected by multiple vulnerabilities :- Specially crafted requests are incorrectly processed by Tomcat and can cause the server to allow injection of arbitrary AJP messages. This can lead to authentication bypass and disclosure of sensitive information. Note this vulnerability only occurs when the following are true (CVE-2011-3190):
- the org.apache.jk.server.JkCoyoteHandler AJP connector is not used.
- POST requests are accepted.
- Large numbers of crafted form parameters can cause excessive CPU consumption due to hash collisions. (CVE-2011-4858, CVE-2012-0022)
IAVB Reference : 2012-B-0035
STIG Finding Severity : Category I
Solution
Upgrade to Apache Tomcat 6.0.35 or later.See Also
http://www.nruns.com/_downloads/advisory28122011.pdf
https://issues.apache.org/bugzilla/show_bug.cgi?id=51698#c2
http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.35
http://svn.apache.org/viewvc?view=revision&revision=1162959
Plugin Details
Severity: High
ID: 800607
Family: Web Servers
Published: 2/22/2012
Updated: 2/22/2012
Nessus ID: 57080
Risk Information
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Temporal Vector: CVSS2#E:F/RL:OF/RC:C
Vulnerability Information
Patch Publication Date: 12/5/2011
Vulnerability Publication Date: 8/20/2011
Reference Information
CVE: CVE-2011-4858, CVE-2012-0022, CVE-2011-3190, CVE-2011-3375