NVD

Id
8152  
Name
CVE-2011-1184  
Description
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-01-14  
Modified Date
2016-08-22  
Seq
2011-1184  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46834 8152 CVE-2011-1184 SUSE-SU-2012:0155  View
46835 8152 CVE-2011-1184 openSUSE-SU-2012:0208  View
46836 8152 CVE-2011-1184 SSRT100825  View
46837 8152 CVE-2011-1184 HPSBUX02860  View
46838 8152 CVE-2011-1184 HPSBST02955  View
46839 8152 CVE-2011-1184 oval:org.mitre.oval:def:19169  View
46840 8152 CVE-2011-1184 RHSA-2012:0074  View
46841 8152 CVE-2011-1184 RHSA-2012:0075  View
46842 8152 CVE-2011-1184 RHSA-2012:0076  View
46843 8152 CVE-2011-1184 RHSA-2012:0077  View
46844 8152 CVE-2011-1184 RHSA-2012:0078  View
46845 8152 CVE-2011-1184 RHSA-2012:0325  View
46846 8152 CVE-2011-1184 http://svn.apache.org/viewvc?view=rev&rev=1087655  View
46847 8152 CVE-2011-1184 http://svn.apache.org/viewvc?view=rev&rev=1158180  View
46848 8152 CVE-2011-1184 http://svn.apache.org/viewvc?view=rev&rev=1159309  View
46849 8152 CVE-2011-1184 http://tomcat.apache.org/security-5.html  View
46850 8152 CVE-2011-1184 http://tomcat.apache.org/security-6.html  View
46851 8152 CVE-2011-1184 http://tomcat.apache.org/security-7.html  View
46852 8152 CVE-2011-1184 DSA-2401  View
46853 8152 CVE-2011-1184 MDVSA-2011:156  View
46854 8152 CVE-2011-1184 RHSA-2011:1845  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33380 JVNDB-2011-003620 Apache Tomcat におけるアクセス制限を回避される脆弱性 Apache Tomcat の HTTP Digest Access Authentication 実装は、リプレイ攻撃への対応策を持たないため、アクセス制限を回避される脆弱性が存在します。 CVE-2011-1184 49091 CVE-2011-1184 8152 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003620.html 2011-04-01 2015-03-26 View