CVE-2007-6286: Infoleak
First published: Tue Feb 12 2008(Updated: )
Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as demonstrated by using netcat to send the empty request.
Credit: secalert@redhat.com secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| maven/org.apache.tomcat:tomcat | >=6.0.0<=6.0.15 | |
| maven/org.apache.tomcat:tomcat | >=5.5.11<=5.5.25 | |
| Tomcat | =5.5.11 | |
| Tomcat | =5.5.12 | |
| Tomcat | =5.5.13 | |
| Tomcat | =5.5.14 | |
| Tomcat | =5.5.15 | |
| Tomcat | =5.5.16 | |
| Tomcat | =5.5.17 | |
| Tomcat | =5.5.18 | |
| Tomcat | =5.5.19 | |
| Tomcat | =5.5.20 | |
| Tomcat | =5.5.21 | |
| Tomcat | =5.5.22 | |
| Tomcat | =5.5.23 | |
| Tomcat | =5.5.24 | |
| Tomcat | =5.5.25 | |
| Tomcat | =6.0.0 | |
| Tomcat | =6.0.1 | |
| Tomcat | =6.0.2 | |
| Tomcat | =6.0.3 | |
| Tomcat | =6.0.4 | |
| Tomcat | =6.0.5 | |
| Tomcat | =6.0.6 | |
| Tomcat | =6.0.7 | |
| Tomcat | =6.0.8 | |
| Tomcat | =6.0.9 | |
| Tomcat | =6.0.10 | |
| Tomcat | =6.0.11 | |
| Tomcat | =6.0.12 | |
| Tomcat | =6.0.13 | |
| Tomcat | =6.0.14 | |
| Tomcat | =6.0.15 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://nvd.nist.gov/vuln/detail/CVE-2007-6286
- https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html
- http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
- http://marc.info/?l=bugtraq&m=139344343412337&w=2
- http://support.apple.com/kb/HT3216
- http://tomcat.apache.org/security-5.html
- http://tomcat.apache.org/security-6.html
- https://github.com/advisories/GHSA-qrj4-rmqg-4hcp (Advisory)
- http://secunia.com/advisories/28878
- http://secunia.com/advisories/28915
- http://secunia.com/advisories/29711
- http://secunia.com/advisories/30676
- http://secunia.com/advisories/32222
- http://secunia.com/advisories/37460
- http://secunia.com/advisories/57126
- http://security.gentoo.org/glsa/glsa-200804-10.xml
- http://securityreason.com/securityalert/3637
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:136
- http://www.securityfocus.com/archive/1/487823/100/0/threaded
- http://www.securityfocus.com/archive/1/507985/100/0/threaded
- http://www.securityfocus.com/bid/31681
- http://www.vmware.com/security/advisories/VMSA-2008-0010.html
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- http://www.vupen.com/english/advisories/2008/0488
- http://www.vupen.com/english/advisories/2008/1856/references
- http://www.vupen.com/english/advisories/2008/2780
- http://www.vupen.com/english/advisories/2009/3316
- https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E
Frequently Asked Questions
What is the severity of CVE-2007-6286?
CVE-2007-6286 has been rated as a critical severity vulnerability as it allows remote attackers to exploit the system.
How do I fix CVE-2007-6286?
To fix CVE-2007-6286, upgrade Apache Tomcat to version 5.5.26 or later for 5.5.x series, and to 6.0.16 or later for 6.0.x series.
What versions of Apache Tomcat are affected by CVE-2007-6286?
CVE-2007-6286 affects Apache Tomcat versions 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15.
Can CVE-2007-6286 be exploited remotely?
Yes, CVE-2007-6286 can be exploited remotely by sending specially crafted empty requests to the SSL port.
What component of Apache Tomcat does CVE-2007-6286 impact?
CVE-2007-6286 impacts the native APR connector of Apache Tomcat.
- collector/github-advisory-latest
- alias/GHSA-qrj4-rmqg-4hcp
- alias/CVE-2007-6286
- collector/github-advisory
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/trending
- agent/source
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-cve
- collector/nvd-index
- collector/nvd-historical
- package-manager/maven
- vendor/apache
- canonical/tomcat
- version/tomcat/5.5.11
- version/tomcat/5.5.12
- version/tomcat/5.5.13
- version/tomcat/5.5.14
- version/tomcat/5.5.15
- version/tomcat/5.5.16
- version/tomcat/5.5.17
- version/tomcat/5.5.18
- version/tomcat/5.5.19
- version/tomcat/5.5.20
- version/tomcat/5.5.21
- version/tomcat/5.5.22
- version/tomcat/5.5.23
- version/tomcat/5.5.24
- version/tomcat/5.5.25
- version/tomcat/6.0.0
- version/tomcat/6.0.1
- version/tomcat/6.0.2
- version/tomcat/6.0.3
- version/tomcat/6.0.4
- version/tomcat/6.0.5
- version/tomcat/6.0.6
- version/tomcat/6.0.7
- version/tomcat/6.0.8
- version/tomcat/6.0.9
- version/tomcat/6.0.10
- version/tomcat/6.0.11
- version/tomcat/6.0.12
- version/tomcat/6.0.13
- version/tomcat/6.0.14
- version/tomcat/6.0.15