VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : 脆弱性脅威分析用情報の定型データ配信
[ about VRDA Feed | JPCERT/CC ] 



 
分析対象脆弱性情報 (リビジョン番号 : 1) [ Download XML ] 
VRDA-090713-001     ( CVE-2008-5515 | CVE-2009-0033 | CVE-2009-0580 | CVE-2009-0781 | CVE-2009-0783 )
Security Vulnerabilities in Solaris Bundled Tomcat May Lead to Unauthorized Access to Data or Denial of Service (DoS)
http://sunsolve.sun.com/search/document.do?assetkey=1-66-263529-1

There are five security vulnerabilities in the Tomcat JSP/Servlet container that affect Tomcat 5.5 bundled in Solaris 9 and Solaris 10 and Tomcat 6 bundled in OpenSolaris.




この情報について
分析情報提供元:
 		JPCERT/CC
 		初版公開日:
 		2009-07-13
分析対象脆弱性情報の分類:
 		アドバイザリ・注意喚起
 		最終更新日:
 		2009-07-13




脆弱性の影響を受ける製品の識別子
cpe:/o:sun:solaris:8     (Sun Solaris 8)
cpe:/o:sun:solaris:9     (Sun Solaris 9)
lapt:/o:sun:opensolaris     ( Sun OpenSolaris)
 


脆弱性の分析内容
[分析に利用した情報の信頼性] [?]
低 [?]

中 [?]
X 高 [?]
[影響の大きさ] [?]
小 [?]

小～中 [?]
X 中～大 [?]
大 [?]
[攻撃経路] [?]
物理アクセス [?]

ローカルマシン上 [?]
同一セグメント上 [?]
X インターネット経由 [?]
[認証レベル] [?]
管理者アカウント [?]

一般ユーザアカウント [?]
フリーアカウント [?]
X 不要 [?]
[攻撃成立に必要なユーザの関与] [?]
複雑 [?]

簡単 [?]
X 不要 [?]
[攻撃の難易度] [?]
高 [?]

中～高 [?]
低～中 [?]
低 [?]
[対策の有無] [?]
公式パッチ有り [?]

公式回避策有り [?]
非公式回避策・パッチ有り [?]
X なし [?]
[インシデントの発生状況] [?]
X 活動なし [?]

Exploit/PoCあり [?]
活動あり [?]
関連情報
Common Vulnerabilities and Exposures (CVE) CVE-2008-5515
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.




Common Vulnerabilities and Exposures (CVE) CVE-2009-0033
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.




Common Vulnerabilities and Exposures (CVE) CVE-2009-0580
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.




Common Vulnerabilities and Exposures (CVE) CVE-2009-0781
Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."




Common Vulnerabilities and Exposures (CVE) CVE-2009-0783
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.








参考情報
Copyright © 2009 JPCERT/CC All Rights Reserved.