NVD

Id
58281  
Name
CVE-2007-6286  
Description
Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as demonstrated by using netcat to send the empty request.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2008-02-11  
Modified Date
2014-03-15  
Seq
2007-6286  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
298824 58281 CVE-2007-6286 APPLE-SA-2008-10-09  View
298825 58281 CVE-2007-6286 SUSE-SR:2009:004  View
298826 58281 CVE-2007-6286 HPSBST02955  View
298827 58281 CVE-2007-6286 GLSA-200804-10  View
298828 58281 CVE-2007-6286 3637  View
298829 58281 CVE-2007-6286 http://support.apple.com/kb/HT3216  View
298830 58281 CVE-2007-6286 http://tomcat.apache.org/security-5.html  View
298831 58281 CVE-2007-6286 http://tomcat.apache.org/security-6.html  View
298832 58281 CVE-2007-6286 MDVSA-2009:136  View
298833 58281 CVE-2007-6286 20080208 [SECURITY] CVE-2007-6286: Tomcat duplicate request processing vulnerability  View
298834 58281 CVE-2007-6286 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
298835 58281 CVE-2007-6286 31681  View
298836 58281 CVE-2007-6286 http://www.vmware.com/security/advisories/VMSA-2008-0010.html  View
298837 58281 CVE-2007-6286 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
298838 58281 CVE-2007-6286 ADV-2008-0488  View
298839 58281 CVE-2007-6286 ADV-2008-1856  View
298840 58281 CVE-2007-6286 ADV-2008-2780  View
298841 58281 CVE-2007-6286 ADV-2009-3316  View
298842 58281 CVE-2007-6286 FEDORA-2008-1467  View
298843 58281 CVE-2007-6286 FEDORA-2008-1603  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45788 JVNDB-2008-001098 Apache Tomcat における SSL リクエストに関する脆弱性 Apache Tomcat には、native ARP コネクタを使用している場合、SSL ポートに対する空のリクエストの処理に不備があり、最近のリクエストを複製して処理を行う脆弱性が存在します。 CVE-2007-6286 29641 CVE-2007-6286 58281 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001098.html 2008-02-11 2015-03-05 View