Detections
Analytics
Apache Tomcat 6.0.x < 6.0.24 Multiple Vulnerabilities
high Nessus Plugin ID 104358
Language:
Synopsis
The remote Apache Tomcat server is affected by a code execution vulnerability.Description
The version of Apache Tomcat installed on the remote host is 6.0.x prior to 6.0.24. It is, therefore, affected by multiple vulnerabilities :- An unspecified flaw exists in the handling of pipelined requests when 'Sendfile' was used. If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could lead to invalid responses or information disclosure. (CVE-2017-5647)
- An unspecified flaw in error page mechanism of the DefaultServlet implementation allows a specially-crafted HTTP request to cause undesired side effects, including the removal or replacement of the custom error page. (CVE-2017-5664)
- An unspecified flaw affects servlet contexts configured as readonly=false with HTTP PUT requests allowed. An attacker can upload a JSP file to that context and execute arbitrary code.
(CVE-2017-12615, CVE-2017-12617)
Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.
Solution
Upgrade to Apache Tomcat version 6.0.24 or later.Plugin Details
Severity: High
ID: 104358
File Name: tomcat_6_0_24.nasl
Version: 1.16
Type: combined
Agent: windows, macosx, unix
Family: Web Servers
Published: 11/2/2017
Updated: 5/6/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.2
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2017-12617
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.7
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:apache:tomcat:6
Required KB Items: installed_sw/Apache Tomcat
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/29/2017
Vulnerability Publication Date: 10/29/2017
CISA Known Exploited Vulnerability Due Dates: 4/15/2022
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (Tomcat RCE via JSP Upload Bypass)
Elliot (Apache Tomcat for Windows HTTP PUT Method File Upload)
Reference Information
CVE: CVE-2017-12615, CVE-2017-12617, CVE-2017-5647, CVE-2017-5664