NVD

Id
3154  
Name
CVE-2008-3271  
Description
Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a "synchronization problem" and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-10-13  
Modified Date
2011-03-07  
Seq
2008-3271  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
20001 3154 CVE-2008-3271 JVN#30732239  View
20002 3154 CVE-2008-3271 JVNDB-2008-000069  View
20003 3154 CVE-2008-3271 SUSE-SR:2008:023  View
20004 3154 CVE-2008-3271 4396  View
20005 3154 CVE-2008-3271 http://tomcat.apache.org/security-4.html  View
20006 3154 CVE-2008-3271 http://tomcat.apache.org/security-5.html  View
20007 3154 CVE-2008-3271 http://www.fujitsu.com/global/support/software/security/products-f/interstage-200806e.html  View
20008 3154 CVE-2008-3271 http://www.nec.co.jp/security-info/secinfo/nv09-006.html  View
20009 3154 CVE-2008-3271 20081009 [SECURITY] CVE-2008-3271 - Apache Tomcat information disclosure  View
20010 3154 CVE-2008-3271 31698  View
20011 3154 CVE-2008-3271 1021039  View
20012 3154 CVE-2008-3271 ADV-2008-2793  View
20013 3154 CVE-2008-3271 ADV-2008-2800  View
20014 3154 CVE-2008-3271 ADV-2009-1818  View
20015 3154 CVE-2008-3271 apache-tomcat-valve-security-bypass(45791)  View
20016 3154 CVE-2008-3271 https://issues.apache.org/bugzilla/show_bug.cgi?id=25835  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45676 JVNDB-2008-000069 Apache Tomcat において権限のないクライアントからのリクエストが実行されてしまう脆弱性 The Apache Software Foundation が提供する Apache Tomcat には、権限のないクライアントからのリクエストが実行されてしまう脆弱性が存在します。 CVE-2008-3271 33384 CVE-2008-3271 3154 2.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000069.html 2008-10-10 2009-07-08 View