Lucene search
Ubuntu.comUB:CVE-2007-6286HistoryFeb 12, 2008 - 12:00 a.m.
CVE-2007-6286
2008-02-1200:00:00
ubuntu.com
ubuntu.com
17
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.03
Percentile
91.0%
Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the
native APR connector is used, does not properly handle an empty request to
the SSL port, which allows remote attackers to trigger handling of โa
duplicate copy of one of the recent requests,โ as demonstrated by using
netcat to send the empty request.
Notes
| Author | Note |
|---|---|
| fujitsu | At least 5.5 doesnโt use the native APR connector. |
Related
veracode
veracode
Replay Attack
2018-11-09 05:47:09
github
github
Apache Tomcat Does Not Properly Handle Empty Requests
2022-05-01 18:41:17
cve
cve
CVE-2007-6286
2008-02-12 01:00:00
cvelist
cvelist
CVE-2007-6286
2008-02-12 00:00:00
osv
osv
Apache Tomcat Does Not Properly Handle Empty Requests
2022-05-01 18:41:17
prion
prion
Server side request forgery (ssrf)
2008-02-12 01:00:00
nvd
nvd
CVE-2007-6286
2008-02-12 01:00:00
seebug
seebug
Apache Tomcat้ๅค่ฏทๆฑๅค็ๅฎๅ
จๆผๆด(CVE-2007-6286)
2012-09-27 00:00:00
gentoo
gentoo
Tomcat: Multiple vulnerabilities
2008-04-10 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200804-10 (tomcat)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200804-10 (tomcat)
2008-09-24 00:00:00
Fedora Update for tomcat5 FEDORA-2008-1603
2009-02-16 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 5.5.26
2008-02-05 00:00:00
Fixed in Apache Tomcat 6.0.16
2008-02-08 00:00:00
nessus
nessus
Apache Tomcat < 5.5.26 Multiple Vulnerabilities
2010-07-01 00:00:00
GLSA-200804-10 : Tomcat: Multiple vulnerabilities
2008-04-17 00:00:00
Apache Tomcat 6.0.x < 6.0.16 Information Disclosure
2008-02-08 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: tomcat5-5.5.26-1jpp.2.fc8
2008-02-13 05:14:35
[SECURITY] Fedora 7 Update: tomcat5-5.5.26-1jpp.2.fc7
2008-02-13 04:55:03
[SECURITY] Fedora 8 Update: tomcat5-5.5.27-0jpp.2.fc8
2008-09-16 23:28:35
vmware
vmware
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.03
Percentile
91.0%
Related for UB:CVE-2007-6286