Detections
Analytics
Apache Tomcat 7.0.0 < 7.0.40 multiple vulnerabilities
high Nessus Plugin ID 66428
Language:
Synopsis
The remote Apache Tomcat server is affected by multiple vulnerabilitiesDescription
The version of Tomcat installed on the remote host is prior to 7.0.40. It is, therefore, affected by multiple vulnerabilities as referenced in the fixed_in_apache_tomcat_7.0.40_security-7 advisory.- java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context- dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.
(CVE-2013-2071)
- Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file. (CVE-2013-4444)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to Apache Tomcat version 7.0.40 or later.See Also
http://www.nessus.org/u?3535dbbb
https://bz.apache.org/bugzilla/show_bug.cgi?id=54178
Plugin Details
Severity: High
ID: 66428
File Name: tomcat_7_0_40.nasl
Version: 1.23
Type: combined
Agent: windows, macosx, unix
Family: Web Servers
Published: 5/15/2013
Updated: 5/23/2024
Configuration: Enable thorough checks
Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2013-4444
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 6.6
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:apache:tomcat:7
Required KB Items: installed_sw/Apache Tomcat
Exploit Ease: No known exploits are available
Patch Publication Date: 5/9/2013
Vulnerability Publication Date: 5/10/2013
Reference Information
CVE: CVE-2013-2071, CVE-2013-4444