CVE-2008-0002

Published: Feb 12, 2008Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.

Affected (11)

Products: Apache: Tomcat

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Apache Tomcat	Version 6.0.10
Apache Tomcat	Version 6.0.11
Apache Tomcat	Version 6.0.12
Apache Tomcat	Version 6.0.13
Apache Tomcat	Version 6.0.14
Apache Tomcat	Version 6.0.15
Apache Tomcat	Version 6.0.5
Apache Tomcat	Version 6.0.6
Apache Tomcat	Version 6.0.7
Apache Tomcat	Version 6.0.8
Apache Tomcat	Version 6.0.9

References (46)

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=139344343412337&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/28834

Source: secalert@redhat.com

http://secunia.com/advisories/28915

Source: secalert@redhat.com

http://secunia.com/advisories/29711

Source: secalert@redhat.com

http://secunia.com/advisories/32222

Source: secalert@redhat.com

http://secunia.com/advisories/37460

Source: secalert@redhat.com

http://secunia.com/advisories/57126

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200804-10.xml

Source: secalert@redhat.com

http://securityreason.com/securityalert/3638

Source: secalert@redhat.com

http://support.apple.com/kb/HT3216

Source: secalert@redhat.com

http://tomcat.apache.org/security-6.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/487812/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/27703

Source: secalert@redhat.com

http://www.securityfocus.com/bid/31681

Source: secalert@redhat.com

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0488

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2780

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/3316

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=139344343412337&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28834

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28915

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29711

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32222

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37460

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/57126

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200804-10.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/3638

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3216

Source: af854a3a-2127-422b-91ae-364da2661108

http://tomcat.apache.org/security-6.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/487812/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/27703

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/31681

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0488

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2780

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/3316

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.