Test Kennung:	1.3.6.1.4.1.25623.1.0.803781
Kategorie:	Web Servers
Titel:	Apache Tomcat SecurityManager Security Bypass Vulnerability
Zusammenfassung:	This host is running Apache Tomcat and is prone to security bypass; vulnerability.
Beschreibung:	Summary: This host is running Apache Tomcat and is prone to security bypass vulnerability. Vulnerability Insight: The flaw is due to the ServletContect attribute being improperly restricted to read-only setting. Vulnerability Impact: Successful exploitation will allow remote attackers to bypass certain authentication and obtain sensitive information. Affected Software/OS: Apache Tomcat version 5.5.x before 5.5.30 Apache Tomcat version 6.0.x before 6.0.30 Apache Tomcat version 7.0.x before 7.0.4 Solution: Upgrade Apache Tomcat version to 5.5.30, 6.0.30, 7.0.4 or later. CVSS Score: 1.2 CVSS Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Querverweis:	BugTraq ID: 46177 Common Vulnerability Exposure (CVE) ID: CVE-2010-3718 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html http://www.securityfocus.com/bid/46177 Bugtraq: 20110205 [SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions (Google Search) http://www.securityfocus.com/archive/1/516211/100/0/threaded Debian Security Information: DSA-2160 (Google Search) http://www.debian.org/security/2011/dsa-2160 HPdes Security Advisory: HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 HPdes Security Advisory: HPSBUX02645 http://marc.info/?l=bugtraq&m=130168502603566&w=2 HPdes Security Advisory: HPSBUX02725 http://marc.info/?l=bugtraq&m=132215163318824&w=2 HPdes Security Advisory: HPSBUX02860 http://marc.info/?l=bugtraq&m=136485229118404&w=2 HPdes Security Advisory: SSRT100627 HPdes Security Advisory: SSRT101146 http://www.mandriva.com/security/advisories?name=MDVSA-2011:030 http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-7.html https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12517 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13969 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19379 http://www.redhat.com/support/errata/RHSA-2011-0791.html http://www.redhat.com/support/errata/RHSA-2011-0896.html http://www.redhat.com/support/errata/RHSA-2011-0897.html http://www.redhat.com/support/errata/RHSA-2011-1845.html http://www.securitytracker.com/id?1025025 http://secunia.com/advisories/43192 http://secunia.com/advisories/45022 http://secunia.com/advisories/57126 http://securityreason.com/securityalert/8072 SuSE Security Announcement: SUSE-SR:2011:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html XForce ISS Database: tomcat-servletcontect-sec-bypass(65159) https://exchange.xforce.ibmcloud.com/vulnerabilities/65159
Copyright	Copyright (C) 2013 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.