Lucene search

RedhatCVE-2007-3385

HistoryAug 14, 2007 - 10:17 p.m.

CVE-2007-3385

2007-08-1422:17:00

CWE-200

redhat

web.nvd.nist.gov

apache tomcat

session hijacking

cve-2007-3385

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0.041

Percentile

92.3%

JSON

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the " character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

Affected configurations

Nvd

Node

apachetomcatMatch3.3

apachetomcatMatch3.3.1

apachetomcatMatch3.3.1a

apachetomcatMatch3.3.2

apachetomcatMatch4.1.0

apachetomcatMatch4.1.1

apachetomcatMatch4.1.2

apachetomcatMatch4.1.3

apachetomcatMatch4.1.3beta

apachetomcatMatch4.1.9beta

apachetomcatMatch4.1.10

apachetomcatMatch4.1.15

apachetomcatMatch4.1.24

apachetomcatMatch4.1.28

apachetomcatMatch4.1.31

apachetomcatMatch4.1.36

apachetomcatMatch5.0.0

apachetomcatMatch5.0.1

apachetomcatMatch5.0.2

apachetomcatMatch5.0.3

apachetomcatMatch5.0.4

apachetomcatMatch5.0.5

apachetomcatMatch5.0.6

apachetomcatMatch5.0.7

apachetomcatMatch5.0.8

apachetomcatMatch5.0.9

apachetomcatMatch5.0.10

apachetomcatMatch5.0.11

apachetomcatMatch5.0.12

apachetomcatMatch5.0.13

apachetomcatMatch5.0.14

apachetomcatMatch5.0.15

apachetomcatMatch5.0.16

apachetomcatMatch5.0.17

apachetomcatMatch5.0.18

apachetomcatMatch5.0.19

apachetomcatMatch5.0.21

apachetomcatMatch5.0.22

apachetomcatMatch5.0.23

apachetomcatMatch5.0.24

apachetomcatMatch5.0.25

apachetomcatMatch5.0.26

apachetomcatMatch5.0.27

apachetomcatMatch5.0.28

apachetomcatMatch5.0.29

apachetomcatMatch5.0.30

apachetomcatMatch5.5.0

apachetomcatMatch5.5.1

apachetomcatMatch5.5.2

apachetomcatMatch5.5.3

apachetomcatMatch5.5.4

apachetomcatMatch5.5.5

apachetomcatMatch5.5.6

apachetomcatMatch5.5.7

apachetomcatMatch5.5.8

apachetomcatMatch5.5.9

apachetomcatMatch5.5.10

apachetomcatMatch5.5.11

apachetomcatMatch5.5.12

apachetomcatMatch5.5.13

apachetomcatMatch5.5.14

apachetomcatMatch5.5.15

apachetomcatMatch5.5.16

apachetomcatMatch5.5.17

apachetomcatMatch5.5.18

apachetomcatMatch5.5.19

apachetomcatMatch5.5.20

apachetomcatMatch5.5.21

apachetomcatMatch5.5.22

apachetomcatMatch5.5.23

apachetomcatMatch5.5.24

apachetomcatMatch6.0.0

apachetomcatMatch6.0.1

apachetomcatMatch6.0.2

apachetomcatMatch6.0.3

apachetomcatMatch6.0.4

apachetomcatMatch6.0.5

apachetomcatMatch6.0.6

apachetomcatMatch6.0.7

apachetomcatMatch6.0.8

apachetomcatMatch6.0.9

apachetomcatMatch6.0.10

apachetomcatMatch6.0.11

apachetomcatMatch6.0.12

apachetomcatMatch6.0.13

VendorProductVersionCPE
apachetomcat3.3cpe:2.3:a:apache:tomcat:3.3:*:*:*:*:*:*:*
apachetomcat3.3.1cpe:2.3:a:apache:tomcat:3.3.1:*:*:*:*:*:*:*
apachetomcat3.3.1acpe:2.3:a:apache:tomcat:3.3.1a:*:*:*:*:*:*:*
apachetomcat3.3.2cpe:2.3:a:apache:tomcat:3.3.2:*:*:*:*:*:*:*
apachetomcat4.1.0cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*
apachetomcat4.1.1cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*
apachetomcat4.1.2cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*
apachetomcat4.1.3cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*
apachetomcat4.1.3cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*
apachetomcat4.1.9cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*

Vendor	Product	Version	CPE
apache	tomcat	3.3	cpe:2.3:a:apache:tomcat:3.3:::::::*
apache	tomcat	3.3.1	cpe:2.3:a:apache:tomcat:3.3.1:::::::*
apache	tomcat	3.3.1a	cpe:2.3:a:apache:tomcat:3.3.1a:::::::*
apache	tomcat	3.3.2	cpe:2.3:a:apache:tomcat:3.3.2:::::::*
apache	tomcat	4.1.0	cpe:2.3:a:apache:tomcat:4.1.0:::::::*
apache	tomcat	4.1.1	cpe:2.3:a:apache:tomcat:4.1.1:::::::*
apache	tomcat	4.1.2	cpe:2.3:a:apache:tomcat:4.1.2:::::::*
apache	tomcat	4.1.3	cpe:2.3:a:apache:tomcat:4.1.3:::::::*
apache	tomcat	4.1.3	cpe:2.3:a:apache:tomcat:4.1.3:beta::::::
apache	tomcat	4.1.9	cpe:2.3:a:apache:tomcat:4.1.9:beta::::::

Rows per page:

1-10 of 851

References

community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554

lists.apple.com/archives/security-announce/2008//Jun/msg00002.html

lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html

lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

secunia.com/advisories/26466

secunia.com/advisories/26898

secunia.com/advisories/27037

secunia.com/advisories/27267

secunia.com/advisories/27727

secunia.com/advisories/28317

secunia.com/advisories/28361

secunia.com/advisories/29242

secunia.com/advisories/30802

secunia.com/advisories/33668

secunia.com/advisories/36486

secunia.com/advisories/44183

securityreason.com/securityalert/3011

securitytracker.com/id?1018557

support.apple.com/kb/HT2163

support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540

tomcat.apache.org/security-6.html

www-01.ibm.com/support/docview.wss?uid=swg1IZ55562

www.debian.org/security/2008/dsa-1447

www.debian.org/security/2008/dsa-1453

www.kb.cert.org/vuls/id/993544

www.mandriva.com/security/advisories?name=MDKSA-2007:241

www.redhat.com/support/errata/RHSA-2007-0871.html

www.redhat.com/support/errata/RHSA-2007-0950.html

www.redhat.com/support/errata/RHSA-2008-0195.html

www.redhat.com/support/errata/RHSA-2008-0261.html

www.securityfocus.com/archive/1/476444/100/0/threaded

www.securityfocus.com/archive/1/500396/100/0/threaded

www.securityfocus.com/archive/1/500412/100/0/threaded

www.securityfocus.com/bid/25316

www.vupen.com/english/advisories/2007/2902

www.vupen.com/english/advisories/2007/3386

www.vupen.com/english/advisories/2007/3527

www.vupen.com/english/advisories/2008/1981/references

www.vupen.com/english/advisories/2009/0233

exchange.xforce.ibmcloud.com/vulnerabilities/35999

lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E

lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E

lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E

lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E

lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E

lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E

lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9549

www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0.041

Percentile

92.3%

JSON

Related for CVE-2007-3385