Detections
Analytics
Apache Tomcat Cross-Application File Manipulation
medium Nessus Plugin ID 39479
Language:
Synopsis
The web server running on the remote host is affected by an information disclosure vulnerability.Description
According to its self-reported version number, the remote host is running a vulnerable version of Apache Tomcat. Affected versions permit a web application to replace the XML parser used to process the XML and TLD files of other applications. This could allow a malicious web app to read or modify 'web.xml', 'context.xml', or TLD files of arbitrary web applications.Solution
Upgrade to versions 7.0.19 / 6.0.20 / 5.5.28 / 4.1.40 or later.Alternatively, apply the patches referenced in the vendor advisory.
See Also
https://bz.apache.org/bugzilla/show_bug.cgi?id=29936
https://www.securityfocus.com/archive/1/504090
http://tomcat.apache.org/security-6.html
Plugin Details
Severity: Medium
ID: 39479
File Name: tomcat_xml_parser.nasl
Version: 1.27
Type: combined
Agent: windows, macosx, unix
Family: Web Servers
Published: 6/22/2009
Updated: 5/6/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.4
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS Score Source: CVE-2009-0783
CVSS v3
Risk Factor: Medium
Base Score: 5.9
Temporal Score: 5.2
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:apache:tomcat:4, cpe:/a:apache:tomcat:5, cpe:/a:apache:tomcat:6, cpe:/a:apache:tomcat:7
Required KB Items: installed_sw/Apache Tomcat
Exploit Ease: No known exploits are available
Patch Publication Date: 6/4/2009
Reference Information
CVE: CVE-2009-0783
BID: 35416