| Description: | Summary:
The remote host is missing an update for the 'tomcat' package(s) announced via the MGASA-2014-0148 advisory.
Vulnerability Insight:
Apache Tomcat 7.x before 7.0.47, when an HTTP connector or AJP connector
is used, does not properly handle certain inconsistent HTTP request
headers, which allows remote attackers to trigger incorrect identification
of a request's length and conduct request-smuggling attacks via (1)
multiple Content-Length headers or (2) a Content-Length header and a
'Transfer-Encoding: chunked' header (CVE-2013-4286).
Apache Tomcat 7.x before 7.0.50 processes chunked transfer coding without
properly handling (1) a large total amount of chunked data or (2)
whitespace characters in an HTTP header value within a trailer field,
which allows remote attackers to cause a denial of service by streaming
data (CVE-2013-4322).
Apache Tomcat 7.x before 7.0.50 allows attackers to obtain 'Tomcat
internals' information by leveraging the presence of an untrusted web
application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML
document containing an external entity declaration in conjunction with an
entity reference, related to an XML External Entity (XXE) issue
(CVE-2013-4590).
Affected Software/OS:
'tomcat' package(s) on Mageia 3.
Solution:
Please install the updated package(s).
CVSS Score:
5.8
CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
