[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

111666

 
 

909

 
 

87321

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2010-2227Date: (C)2010-07-13   (M)2018-06-11


Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.4
Exploit Score: 10.0
Impact Score: 4.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: PARTIAL
  
Reference:
SECTRACK-1024180
http://www.securityfocus.com/archive/1/archive/1/512272/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded
SECUNIA-40813
SECUNIA-41025
BID-41544
SECUNIA-42079
SECUNIA-42368
SECUNIA-42454
SECUNIA-43310
SECUNIA-44183
ADV-2010-1986
ADV-2010-2868
ADV-2010-3056
APPLE-SA-2011-10-12-3
DSA-2207
FEDORA-2010-16248
FEDORA-2010-16270
HPSBST02955
HPSBUX02579
HPSBUX02860
IAVM:2011-A-0066
IAVM:2012-B-0048
MDVSA-2010:176
MDVSA-2010:177
RHSA-2010:0580
RHSA-2010:0581
RHSA-2010:0582
RHSA-2010:0583
SSRT100203
SSRT101146
SUSE-SR:2010:017
http://geronimo.apache.org/21x-security-report.html
http://geronimo.apache.org/22x-security-report.html
http://support.apple.com/kb/HT5002
http://svn.apache.org/viewvc?view=revision&revision=958911
http://svn.apache.org/viewvc?view=revision&revision=958977
http://svn.apache.org/viewvc?view=revision&revision=959428
http://tomcat.apache.org/security-5.html
http://tomcat.apache.org/security-6.html
http://tomcat.apache.org/security-7.html
http://www.novell.com/support/viewContent.do?externalId=7007274
http://www.novell.com/support/viewContent.do?externalId=7007275
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
tomcat-transferencoding-dos(60264)

CPE    55
cpe:/a:apache:tomcat:5.5.3
cpe:/a:apache:tomcat:5.5.2
cpe:/a:apache:tomcat:5.5.5
cpe:/a:apache:tomcat:5.5.4
...
CWE    1
CWE-119
OVAL    12
oval:org.secpod.oval:def:301162
oval:org.secpod.oval:def:301133
oval:org.secpod.oval:def:20832
oval:org.secpod.oval:def:201701
...

© SecPod Technologies