CVE-2007-5333
Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 62.6%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 62.58% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- apache/tomcat
- Source
- secalert@redhat.com
References
- http://jvn.jp/jp/JVN%2309470767/index.htmlThird Party Advisory, VDB Entry
- http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.htmlMailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.htmlThird Party Advisory
- http://marc.info/?l=bugtraq&m=139344343412337&w=2Mailing List, Third Party Advisory
- http://secunia.com/advisories/28878Broken Link
- http://secunia.com/advisories/28884Broken Link
- http://secunia.com/advisories/28915Broken Link
- http://secunia.com/advisories/29711Broken Link
- http://secunia.com/advisories/30676Broken Link
- http://secunia.com/advisories/30802Broken Link
- http://secunia.com/advisories/32036Broken Link
- http://secunia.com/advisories/32222Broken Link
- http://secunia.com/advisories/33330Broken Link
- http://secunia.com/advisories/37460Broken Link
- http://secunia.com/advisories/44183Broken Link
- http://secunia.com/advisories/57126Broken Link
- http://security.gentoo.org/glsa/glsa-200804-10.xmlBroken Link
- http://securityreason.com/securityalert/3636Broken Link
- http://support.apple.com/kb/HT2163Third Party Advisory
- http://support.apple.com/kb/HT3216Third Party Advisory
- http://tomcat.apache.org/security-4.htmlVendor Advisory
- http://tomcat.apache.org/security-5.htmlVendor Advisory
- http://tomcat.apache.org/security-6.htmlVendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg24018932Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27012047Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27012048Third Party Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20133Third Party Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20991Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:018Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.