Test Kennung:	1.3.6.1.4.1.25623.1.0.147036
Kategorie:	Web Servers
Titel:	Apache Tomcat 5.5.x < 5.5.34 Multiple Vulnerabilities - Linux
Zusammenfassung:	Apache Tomcat is prone to multiple vulnerabilities.
Beschreibung:	Summary: Apache Tomcat is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2011-1184, CVE-2011-5062, CVE-2011-5063, CVE-2011-5064: Multiple weaknesses in HTTP DIGEST authentication - CVE-2011-2204, CVE-2011-2526, CVE-2011-2729: Information disclosure - CVE-2011-3190: Authentication bypass and information disclosure Affected Software/OS: Apache Tomcat version 5.5.x through 5.5.33. Solution: Update to version 5.5.34 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1184 57126 http://secunia.com/advisories/57126 DSA-2401 http://www.debian.org/security/2012/dsa-2401 HPSBOV02762 http://marc.info/?l=bugtraq&m=133469267822771&w=2 HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 HPSBUX02860 http://marc.info/?l=bugtraq&m=136485229118404&w=2 MDVSA-2011:156 http://www.mandriva.com/security/advisories?name=MDVSA-2011:156 RHSA-2011:1845 http://www.redhat.com/support/errata/RHSA-2011-1845.html RHSA-2012:0074 http://rhn.redhat.com/errata/RHSA-2012-0074.html RHSA-2012:0075 http://rhn.redhat.com/errata/RHSA-2012-0075.html RHSA-2012:0076 http://rhn.redhat.com/errata/RHSA-2012-0076.html RHSA-2012:0077 http://rhn.redhat.com/errata/RHSA-2012-0077.html RHSA-2012:0078 http://rhn.redhat.com/errata/RHSA-2012-0078.html RHSA-2012:0325 http://rhn.redhat.com/errata/RHSA-2012-0325.html SSRT100825 SSRT101146 SUSE-SU-2012:0155 http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00002.html [tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/ https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/ https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E http://svn.apache.org/viewvc?view=rev&rev=1087655 http://svn.apache.org/viewvc?view=rev&rev=1158180 http://svn.apache.org/viewvc?view=rev&rev=1159309 http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-7.html openSUSE-SU-2012:0208 http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00006.html oval:org.mitre.oval:def:19169 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19169 Common Vulnerability Exposure (CVE) ID: CVE-2011-5062 Debian Security Information: DSA-2401 (Google Search) HPdes Security Advisory: HPSBST02955 https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E RedHat Security Advisories: RHSA-2012:0074 RedHat Security Advisories: RHSA-2012:0075 RedHat Security Advisories: RHSA-2012:0076 RedHat Security Advisories: RHSA-2012:0077 RedHat Security Advisories: RHSA-2012:0078 RedHat Security Advisories: RHSA-2012:0325 SuSE Security Announcement: SUSE-SU-2012:0155 (Google Search) SuSE Security Announcement: openSUSE-SU-2012:0208 (Google Search) Common Vulnerability Exposure (CVE) ID: CVE-2011-5063 Common Vulnerability Exposure (CVE) ID: CVE-2011-5064 Common Vulnerability Exposure (CVE) ID: CVE-2011-2204 http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html BugTraq ID: 48456 http://www.securityfocus.com/bid/48456 HPdes Security Advisory: HPSBOV02762 HPdes Security Advisory: HPSBUX02725 http://marc.info/?l=bugtraq&m=132215163318824&w=2 HPdes Security Advisory: HPSBUX02860 HPdes Security Advisory: SSRT100627 HPdes Security Advisory: SSRT100825 HPdes Security Advisory: SSRT101146 http://www.osvdb.org/73429 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14931 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19532 http://securitytracker.com/id?1025712 http://secunia.com/advisories/44981 http://secunia.com/advisories/48308 XForce ISS Database: tomcat-jmx-info-disclosure(68238) https://exchange.xforce.ibmcloud.com/vulnerabilities/68238 Common Vulnerability Exposure (CVE) ID: CVE-2011-2526 1025788 http://www.securitytracker.com/id?1025788 20110713 [SECURITY] CVE-2011-2526 Apache Tomcat Information disclosure and availability vulnerabilities http://www.securityfocus.com/archive/1/518889/100/0/threaded 45232 http://secunia.com/advisories/45232 48308 48667 http://www.securityfocus.com/bid/48667 73797 http://osvdb.org/73797 73798 http://osvdb.org/73798 HPSBUX02725 SSRT100627 http://svn.apache.org/viewvc?view=revision&revision=1145383 http://svn.apache.org/viewvc?view=revision&revision=1145571 http://svn.apache.org/viewvc?view=revision&revision=1145694 http://svn.apache.org/viewvc?view=revision&revision=1146005 https://bugzilla.redhat.com/show_bug.cgi?id=720948 oval:org.mitre.oval:def:14573 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14573 oval:org.mitre.oval:def:19514 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19514 tomcat-sendfile-info-disclosure(68541) https://exchange.xforce.ibmcloud.com/vulnerabilities/68541 Common Vulnerability Exposure (CVE) ID: CVE-2011-2729 1025925 http://securitytracker.com/id?1025925 20110812 [SECURITY] CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat) http://www.securityfocus.com/archive/1/519263/100/0/threaded 46030 http://secunia.com/advisories/46030 49143 http://www.securityfocus.com/bid/49143 RHSA-2011:1291 http://www.redhat.com/support/errata/RHSA-2011-1291.html RHSA-2011:1292 http://www.redhat.com/support/errata/RHSA-2011-1292.html [commons-dev] 20110812 [AANNOUNCE] Apache Commons Daemon 1.0.7 released http://mail-archives.apache.org/mod_mbox/commons-dev/201108.mbox/%3C4E451B2B.9090108%40apache.org%3E [tomcat-announce] 20110812 [SECURITY] CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat) http://mail-archives.apache.org/mod_mbox/tomcat-announce/201108.mbox/%3C4E45221D.1020306%40apache.org%3E http://people.apache.org/~markt/patches/2011-08-12-cve2011-2729-tc5.patch http://svn.apache.org/viewvc?view=revision&revision=1152701 http://svn.apache.org/viewvc?view=revision&revision=1153379 http://svn.apache.org/viewvc?view=revision&revision=1153824 https://bugzilla.redhat.com/show_bug.cgi?id=730400 https://issues.apache.org/jira/browse/DAEMON-214 openSUSE-SU-2011:1062 http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00024.html oval:org.mitre.oval:def:14743 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14743 oval:org.mitre.oval:def:19450 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19450 tomcat-jsvc-info-disclosure(69161) https://exchange.xforce.ibmcloud.com/vulnerabilities/69161 Common Vulnerability Exposure (CVE) ID: CVE-2011-3190 BugTraq ID: 49353 http://www.securityfocus.com/bid/49353 Bugtraq: 20110829 [SECURITY] CVE-2011-3190 Apache Tomcat Authentication bypass and information disclosure (Google Search) http://www.securityfocus.com/archive/1/519466/100/0/threaded https://issues.apache.org/bugzilla/show_bug.cgi?id=51698 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14933 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19465 http://www.securitytracker.com/id?1025993 http://secunia.com/advisories/45748 http://secunia.com/advisories/49094 http://securityreason.com/securityalert/8362 XForce ISS Database: tomcat-ajp-security-bypass(69472) https://exchange.xforce.ibmcloud.com/vulnerabilities/69472
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.