NVD

Id
57417  
Name
CVE-2007-5342  
Description
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-12-27  
Modified Date
2014-03-15  
Seq
2007-5342  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293545 57417 CVE-2007-5342 APPLE-SA-2008-10-09  View
293546 57417 CVE-2007-5342 SUSE-SR:2009:004  View
293547 57417 CVE-2007-5342 HPSBST02955  View
293548 57417 CVE-2007-5342 oval:org.mitre.oval:def:10417  View
293549 57417 CVE-2007-5342 GLSA-200804-10  View
293550 57417 CVE-2007-5342 3485  View
293551 57417 CVE-2007-5342 http://support.apple.com/kb/HT3216  View
293552 57417 CVE-2007-5342 http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm  View
293553 57417 CVE-2007-5342 http://svn.apache.org/viewvc?view=rev&revision=606594  View
293554 57417 CVE-2007-5342 http://tomcat.apache.org/security-5.html  View
293555 57417 CVE-2007-5342 http://tomcat.apache.org/security-6.html  View
293556 57417 CVE-2007-5342 DSA-1447  View
293557 57417 CVE-2007-5342 MDVSA-2008:188  View
293558 57417 CVE-2007-5342 RHSA-2008:0042  View
293559 57417 CVE-2007-5342 RHSA-2008:0195  View
293560 57417 CVE-2007-5342 RHSA-2008:0831  View
293561 57417 CVE-2007-5342 RHSA-2008:0832  View
293562 57417 CVE-2007-5342 RHSA-2008:0833  View
293563 57417 CVE-2007-5342 RHSA-2008:0834  View
293564 57417 CVE-2007-5342 RHSA-2008:0862  View
293565 57417 CVE-2007-5342 20071223 [CVE-2007-5342] Apache Tomcat"s default security policy is too open  View
293566 57417 CVE-2007-5342 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
293567 57417 CVE-2007-5342 27006  View
293568 57417 CVE-2007-5342 31681  View
293569 57417 CVE-2007-5342 http://www.vmware.com/security/advisories/VMSA-2008-0010.html  View
293570 57417 CVE-2007-5342 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
293571 57417 CVE-2007-5342 ADV-2008-0013  View
293572 57417 CVE-2007-5342 ADV-2008-1856  View
293573 57417 CVE-2007-5342 ADV-2008-2780  View
293574 57417 CVE-2007-5342 ADV-2008-2823  View
293575 57417 CVE-2007-5342 ADV-2009-3316  View
293576 57417 CVE-2007-5342 apache-juli-logging-weak-security(39201)  View
293577 57417 CVE-2007-5342 FEDORA-2008-1467  View
293578 57417 CVE-2007-5342 FEDORA-2008-1603  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52388 JVNDB-2007-001080 Apache Tomcat の JULI ロギングコンポーネントにおけるウェブアプリケーションのパーミッションに関する脆弱性 Apache Tomcat の JULI ロギングコンポーネントには、catalina.policy において、ウェブアプリケーションのパーミッションを適切に処理しない脆弱性が存在します。 CVE-2007-5342 28697 CVE-2007-5342 57417 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001080.html 2007-12-27 2015-03-05 View