[Forgot Password]
Login  Register Subscribe

23631

 
 

126951

 
 

99602

 
 

909

 
 

80198

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2010-2227

Date: (C)2010-07-13   (M)2017-12-01 


Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."

CVSS Score: 6.4Access Vector: NETWORK
Exploit Score: 10.0Access Complexity: LOW
Impact Score: 4.9Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: NONE
 Availability: PARTIAL





Reference:
SECTRACK-1024180
http://www.securityfocus.com/archive/1/archive/1/512272/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded
SECUNIA-40813
SECUNIA-41025
BID-41544
SECUNIA-42079
SECUNIA-42368
SECUNIA-42454
SECUNIA-43310
SECUNIA-44183
ADV-2010-1986
ADV-2010-2868
ADV-2010-3056
APPLE-SA-2011-10-12-3
DSA-2207
FEDORA-2010-16248
FEDORA-2010-16270
HPSBST02955
HPSBUX02579
HPSBUX02860
IAVM:2011-A-0066
IAVM:2012-B-0048
MDVSA-2010:176
MDVSA-2010:177
RHSA-2010:0580
RHSA-2010:0581
RHSA-2010:0582
RHSA-2010:0583
SSRT100203
SSRT101146
SUSE-SR:2010:017
http://geronimo.apache.org/21x-security-report.html
http://geronimo.apache.org/22x-security-report.html
http://support.apple.com/kb/HT5002
http://svn.apache.org/viewvc?view=revision&revision=958911
http://svn.apache.org/viewvc?view=revision&revision=958977
http://svn.apache.org/viewvc?view=revision&revision=959428
http://tomcat.apache.org/security-5.html
http://tomcat.apache.org/security-6.html
http://tomcat.apache.org/security-7.html
http://www.novell.com/support/viewContent.do?externalId=7007274
http://www.novell.com/support/viewContent.do?externalId=7007275
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
tomcat-transferencoding-dos(60264)

CPE    55
cpe:/a:apache:tomcat:5.5.3
cpe:/a:apache:tomcat:5.5.2
cpe:/a:apache:tomcat:5.5.28
cpe:/a:apache:tomcat:5.5.5
...
CWE    1
CWE-119
OVAL    12
oval:org.secpod.oval:def:301133
oval:org.secpod.oval:def:20832
oval:org.secpod.oval:def:100309
oval:org.secpod.oval:def:100808
...

© 2013 SecPod Technologies