According to its self-reported version number, the Apache Tomcat instance listening on the remote host is prior to 8.0.0-RC10. It is, therefore, affected by multiple vulnerabilities:

  - The fix for CVE-2012-3544 was not complete and limits     are not properly applied to chunk extensions and     whitespaces in certain trailing headers. This error     could allow denial of service attacks. (CVE-2013-4322)

  - The application allows XML External Entity (XXE)     processing that could disclose sensitive information.
    (CVE-2013-4590)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0429 advisory.

    - Resolves: CVE-2014-0050

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0526 advisory.

    Red Hat JBoss Web Server is a fully integrated and certified set of     components for hosting Java web applications. It is comprised of the Apache     HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector     (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat     Native library.

    It was found that when Tomcat processed a series of HTTP requests in which     at least one request contained either multiple content-length headers, or     one content-length header with a chunked transfer-encoding header, Tomcat     would incorrectly handle the request. A remote attacker could use this flaw     to poison a web cache, perform cross-site scripting (XSS) attacks, or     obtain sensitive information from other requests. (CVE-2013-4286)

    It was discovered that the fix for CVE-2012-3544 did not properly resolve a     denial of service flaw in the way Tomcat processed chunk extensions and     trailing headers in chunked requests. A remote attacker could use this flaw     to send an excessively long request that, when processed by Tomcat, could     consume network bandwidth, CPU, and memory on the Tomcat server. Note that     chunked transfer encoding is enabled by default. (CVE-2013-4322)

    A denial of service flaw was found in the way Apache Commons FileUpload,     which is embedded in Tomcat, handled small-sized buffers used by     MultipartStream. A remote attacker could use this flaw to create a     malformed Content-Type header for a multipart request, causing Tomcat to     enter an infinite loop when processing such an incoming request.
    (CVE-2014-0050)

    All users of Red Hat JBoss Web Server 2.0.1 are advised to upgrade to these     updated tomcat7 packages, which contain backported patches to correct these     issues. The Red Hat JBoss Web Server process must be restarted for the     update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It was discovered that Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources. (CVE-2014-0075)

It was found that Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a Tomcat server located behind a reverse proxy that processed the content length header correctly. (CVE-2014-0099)

It was found that the org.apache.catalina.servlets.DefaultServlet implementation in Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information. (CVE-2014-0096)

This update also fixes the following bugs :

  - The patch that resolved the CVE-2014-0050 issue     contained redundant code. This update removes the     redundant code.

  - The patch that resolved the CVE-2013-4322 issue     contained an invalid check that triggered a     java.io.EOFException while reading trailer headers for     chunked requests. This update fixes the check and the     aforementioned exception is no longer triggered in the     described scenario.

Tomcat must be restarted for this update to take effect.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0686 advisory.

    Apache Tomcat is a servlet container for the Java Servlet and JavaServer     Pages (JSP) technologies.

    It was found that a fix for a previous security flaw introduced a     regression that could cause a denial of service in Tomcat 7. A remote     attacker could use this flaw to consume an excessive amount of CPU on the     Tomcat server by sending a specially crafted request to that server.
    (CVE-2014-0186)

    It was found that when Tomcat 7 processed a series of HTTP requests in     which at least one request contained either multiple content-length     headers, or one content-length header with a chunked transfer-encoding     header, Tomcat would incorrectly handle the request. A remote attacker     could use this flaw to poison a web cache, perform cross-site scripting     (XSS) attacks, or obtain sensitive information from other requests.
    (CVE-2013-4286)

    It was discovered that the fix for CVE-2012-3544 did not properly resolve a     denial of service flaw in the way Tomcat 7 processed chunk extensions and     trailing headers in chunked requests. A remote attacker could use this flaw     to send an excessively long request that, when processed by Tomcat, could     consume network bandwidth, CPU, and memory on the Tomcat server. Note that     chunked transfer encoding is enabled by default. (CVE-2013-4322)

    All Tomcat 7 users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues. Tomcat must be     restarted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

a. vCenter Server Apache Struts Update

   The Apache Struts library is updated to address a security issue.  

   This issue may lead to remote code execution after authentication.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the identifier CVE-2014-0114 to this issue.


b. vCenter Server tc-server 2.9.5 / Apache Tomcat 7.0.52 updates

   tc-server has been updated to version 2.9.5 to address multiple    security issues. This version of tc-server includes Apache Tomcat    7.0.52.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the identifiers CVE-2013-4590, CVE-2013-4322, and    CVE-2014-0050 to these issues. 

c. Update to ESXi glibc package

   glibc is updated to address multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the identifiers CVE-2013-0242 and CVE-2013-1914 to    these issues. 

d. vCenter and Update Manager, Oracle JRE 1.7 Update 55

   Oracle has documented the CVE identifiers that are addressed in    JRE 1.7.0 update 55 in the Oracle Java SE Critical Patch Update    Advisory of April 2014. The References section provides a link to    this advisory.

ID	Name	Product	Family	Published	Updated	Severity
121122	Apache Tomcat < 8.0.0-RC10 Multiple Vulnerabilities	Nessus	Web Servers	1/11/2019	1/20/2026	low
73677	Oracle Linux 6 : tomcat6 (ELSA-2014-0429)	Nessus	Oracle Linux Local Security Checks	4/24/2014	4/29/2025	critical
76241	RHEL 5 / 6 : Red Hat JBoss Web Server 2.0.1 tomcat7 (RHSA-2014:0526)	Nessus	Red Hat Local Security Checks	6/26/2014	4/29/2025	critical
76450	Scientific Linux Security Update : tomcat6 on SL6.x i386/srpm/x86_64 (20140709)	Nessus	Scientific Linux Local Security Checks	7/10/2014	1/14/2021	high
76895	RHEL 7 : tomcat (RHSA-2014:0686)	Nessus	Red Hat Local Security Checks	7/30/2014	4/29/2025	medium
77630	VMSA-2014-0008 : VMware vSphere product updates to third-party libraries	Nessus	VMware ESX Local Security Checks	9/11/2014	1/6/2021	high

Detections

Analytics

Plugins Search

low

critical

critical

high

medium

high