NVD

Id
13710  
Name
CVE-2010-2227  
Description
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-07-13  
Modified Date
2014-03-16  
Seq
2010-2227  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
76154 13710 CVE-2010-2227 http://geronimo.apache.org/21x-security-report.html  View
76155 13710 CVE-2010-2227 http://geronimo.apache.org/22x-security-report.html  View
76156 13710 CVE-2010-2227 APPLE-SA-2011-10-12-3  View
76157 13710 CVE-2010-2227 FEDORA-2010-16248  View
76158 13710 CVE-2010-2227 FEDORA-2010-16270  View
76159 13710 CVE-2010-2227 SUSE-SR:2010:017  View
76160 13710 CVE-2010-2227 SSRT100203  View
76161 13710 CVE-2010-2227 HPSBUX02860  View
76162 13710 CVE-2010-2227 HPSBST02955  View
76163 13710 CVE-2010-2227 oval:org.mitre.oval:def:18532  View
76164 13710 CVE-2010-2227 1024180  View
76165 13710 CVE-2010-2227 http://support.apple.com/kb/HT5002  View
76166 13710 CVE-2010-2227 http://svn.apache.org/viewvc?view=revision&revision=958911  View
76167 13710 CVE-2010-2227 http://svn.apache.org/viewvc?view=revision&revision=958977  View
76168 13710 CVE-2010-2227 http://svn.apache.org/viewvc?view=revision&revision=959428  View
76169 13710 CVE-2010-2227 http://tomcat.apache.org/security-5.html  View
76170 13710 CVE-2010-2227 http://tomcat.apache.org/security-6.html  View
76171 13710 CVE-2010-2227 http://tomcat.apache.org/security-7.html  View
76172 13710 CVE-2010-2227 DSA-2207  View
76173 13710 CVE-2010-2227 MDVSA-2010:176  View
76174 13710 CVE-2010-2227 MDVSA-2010:177  View
76175 13710 CVE-2010-2227 http://www.novell.com/support/viewContent.do?externalId=7007274  View
76176 13710 CVE-2010-2227 http://www.novell.com/support/viewContent.do?externalId=7007275  View
76177 13710 CVE-2010-2227 RHSA-2010:0580  View
76178 13710 CVE-2010-2227 RHSA-2010:0581  View
76179 13710 CVE-2010-2227 RHSA-2010:0582  View
76180 13710 CVE-2010-2227 RHSA-2010:0583  View
76181 13710 CVE-2010-2227 20100709 [SECURITY] CVE-2010-2227: Apache Tomcat Remote Denial Of Service and Information Disclosure Vulnerability  View
76182 13710 CVE-2010-2227 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
76183 13710 CVE-2010-2227 41544  View
76184 13710 CVE-2010-2227 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
76185 13710 CVE-2010-2227 http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
76186 13710 CVE-2010-2227 ADV-2010-1986  View
76187 13710 CVE-2010-2227 ADV-2010-2868  View
76188 13710 CVE-2010-2227 ADV-2010-3056  View
76189 13710 CVE-2010-2227 tomcat-transferencoding-dos(60264)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35960 JVNDB-2010-001740 Apache Tomcat における重要な情報を取得される脆弱性 Apache Tomcat には、不正な Transfer-Encoding ヘッダを適切に処理しないため、サービス運用妨害 (DoS) 状態となる、または重要な情報を取得される脆弱性が存在します。 CVE-2010-2227 44807 CVE-2010-2227 13710 6.4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001740.html 2010-07-13 2015-03-25 View