Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2011-1184
Description:The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.
Test IDs: 1.3.6.1.4.1.25623.1.0.70718   1.3.6.1.4.1.25623.1.0.123939   1.3.6.1.4.1.25623.1.0.122020   1.3.6.1.4.1.25623.1.1.4.2012.0155.1  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2011-1184
Debian Security Information: DSA-2401 (Google Search)
http://www.debian.org/security/2012/dsa-2401
HPdes Security Advisory: HPSBOV02762
http://marc.info/?l=bugtraq&m=133469267822771&w=2
HPdes Security Advisory: HPSBST02955
http://marc.info/?l=bugtraq&m=139344343412337&w=2
HPdes Security Advisory: HPSBUX02860
http://marc.info/?l=bugtraq&m=136485229118404&w=2
HPdes Security Advisory: SSRT100825
http://marc.info/?l=bugtraq&m=133469267822771&w=2
HPdes Security Advisory: SSRT101146
http://marc.info/?l=bugtraq&m=136485229118404&w=2
http://www.mandriva.com/security/advisories?name=MDVSA-2011:156
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19169
RedHat Security Advisories: RHSA-2011:1845
http://www.redhat.com/support/errata/RHSA-2011-1845.html
RedHat Security Advisories: RHSA-2012:0074
http://rhn.redhat.com/errata/RHSA-2012-0074.html
RedHat Security Advisories: RHSA-2012:0075
http://rhn.redhat.com/errata/RHSA-2012-0075.html
RedHat Security Advisories: RHSA-2012:0076
http://rhn.redhat.com/errata/RHSA-2012-0076.html
RedHat Security Advisories: RHSA-2012:0077
http://rhn.redhat.com/errata/RHSA-2012-0077.html
RedHat Security Advisories: RHSA-2012:0078
http://rhn.redhat.com/errata/RHSA-2012-0078.html
RedHat Security Advisories: RHSA-2012:0325
http://rhn.redhat.com/errata/RHSA-2012-0325.html
http://secunia.com/advisories/57126
SuSE Security Announcement: SUSE-SU-2012:0155 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00002.html
SuSE Security Announcement: openSUSE-SU-2012:0208 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00006.html




© 1998-2021 E-Soft Inc. All rights reserved.