CVE-2008-0002

Published Feb 12, 2008

Last updated 6 years ago

Overview

Description: Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.
Source: secalert@redhat.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5.8
Impact score: 4.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"
          },
          {
            "criteria": "cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"
          },
          {
            "criteria": "cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"
          },
          {
            "criteria": "cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9C95ADA4-66F5-45C4-A677-ACE22367A75A"
          },
          {
            "criteria": "cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "11951A10-39A2-4FF5-8C43-DF94730FB794"
          },
          {
            "criteria": "cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "351E5BCF-A56B-4D91-BA3C-21A4B77D529A"
          },
          {
            "criteria": "cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2DC2BBB4-171E-4EFF-A575-A5B7FF031755"
          },
          {
            "criteria": "cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6B6B0504-27C1-4824-A928-A878CBBAB32D"
          },
          {
            "criteria": "cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"
          },
          {
            "criteria": "cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D903956B-14F5-4177-AF12-0A5F1846D3C4"
          },
          {
            "criteria": "cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "81F847DC-A2F5-456C-9038-16A0E85F4C3B"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References