[Forgot Password]
Login  Register Subscribe

24003

 
 

131401

 
 

103942

 
 

909

 
 

84044

 
 

133

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2010-2227Date: (C)2010-07-13   (M)2017-10-04


Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : CVSS Score : 6.4
Exploit Score: Exploit Score: 10.0
Impact Score: Impact Score: 4.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: NETWORK
Attack Complexity: Access Complexity: LOW
Privileges Required: Authentication: NONE
User Interaction: Confidentiality: PARTIAL
Scope: Integrity: NONE
Confidentiality: Availability: PARTIAL
Integrity:  
Availability:  
  
Reference:
SECTRACK-1024180
http://www.securityfocus.com/archive/1/archive/1/512272/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded
SECUNIA-40813
SECUNIA-41025
BID-41544
SECUNIA-42079
SECUNIA-42368
SECUNIA-42454
SECUNIA-43310
SECUNIA-44183
ADV-2010-1986
ADV-2010-2868
ADV-2010-3056
APPLE-SA-2011-10-12-3
DSA-2207
FEDORA-2010-16248
FEDORA-2010-16270
HPSBST02955
HPSBUX02579
HPSBUX02860
IAVM:2011-A-0066
IAVM:2012-B-0048
MDVSA-2010:176
MDVSA-2010:177
RHSA-2010:0580
RHSA-2010:0581
RHSA-2010:0582
RHSA-2010:0583
SSRT100203
SSRT101146
SUSE-SR:2010:017
http://geronimo.apache.org/21x-security-report.html
http://geronimo.apache.org/22x-security-report.html
http://support.apple.com/kb/HT5002
http://svn.apache.org/viewvc?view=revision&revision=958911
http://svn.apache.org/viewvc?view=revision&revision=958977
http://svn.apache.org/viewvc?view=revision&revision=959428
http://tomcat.apache.org/security-5.html
http://tomcat.apache.org/security-6.html
http://tomcat.apache.org/security-7.html
http://www.novell.com/support/viewContent.do?externalId=7007274
http://www.novell.com/support/viewContent.do?externalId=7007275
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
tomcat-transferencoding-dos(60264)

CPE    55
cpe:/a:apache:tomcat:6.0.18
cpe:/a:apache:tomcat:6.0.17
cpe:/a:apache:tomcat:6.0.19
cpe:/a:apache:tomcat:6.0.14
...
CWE    1
CWE-119
OVAL    12
oval:org.secpod.oval:def:301133
oval:org.secpod.oval:def:20832
oval:org.secpod.oval:def:301162
oval:org.secpod.oval:def:201701
...

© 2013 SecPod Technologies