--%> SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)
[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2010-2227

Date: (C)2010-07-13   (M)2017-09-22
 
CVSS Score: 6.4Access Vector: NETWORK
Exploitability Subscore: 10.0Access Complexity: LOW
Impact Subscore: 4.9Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: NONE
 Availability: PARTIAL











Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."

Reference:
SECTRACK-1024180
http://www.securityfocus.com/archive/1/archive/1/512272/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded
SECUNIA-40813
SECUNIA-41025
BID-41544
SECUNIA-42079
SECUNIA-42368
SECUNIA-42454
SECUNIA-43310
SECUNIA-44183
ADV-2010-1986
ADV-2010-2868
ADV-2010-3056
APPLE-SA-2011-10-12-3
DSA-2207
FEDORA-2010-16248
FEDORA-2010-16270
HPSBST02955
HPSBUX02579
HPSBUX02860
IAVM:2011-A-0066
IAVM:2012-B-0048
MDVSA-2010:176
MDVSA-2010:177
RHSA-2010:0580
RHSA-2010:0581
RHSA-2010:0582
RHSA-2010:0583
SSRT100203
SSRT101146
SUSE-SR:2010:017
http://geronimo.apache.org/21x-security-report.html
http://geronimo.apache.org/22x-security-report.html
http://support.apple.com/kb/HT5002
http://svn.apache.org/viewvc?view=revision&revision=958911
http://svn.apache.org/viewvc?view=revision&revision=958977
http://svn.apache.org/viewvc?view=revision&revision=959428
http://tomcat.apache.org/security-5.html
http://tomcat.apache.org/security-6.html
http://tomcat.apache.org/security-7.html
http://www.novell.com/support/viewContent.do?externalId=7007274
http://www.novell.com/support/viewContent.do?externalId=7007275
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
tomcat-transferencoding-dos(60264)

CPE    55
cpe:/a:apache:tomcat:5.5.28
cpe:/a:apache:tomcat:5.5.29
cpe:/a:apache:tomcat:5.5.26
cpe:/a:apache:tomcat:5.5.27
...
CWE    1
CWE-119
OVAL    12
oval:org.secpod.oval:def:301133
oval:org.secpod.oval:def:20832
oval:org.secpod.oval:def:3123
oval:org.secpod.oval:def:100309
...

© 2013 SecPod Technologies