CVE-2008-3271: Medium severity tomcat vulnerability

Published Oct 13, 2008

Updated

Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a "synchronization problem" and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve.

Affected Software

34 affected components

Apache Tomcat=4.1.2

Apache Tomcat=4.1.21

Apache Tomcat=4.1.24

Apache Tomcat=4.1.25

Apache Tomcat=4.1.4

Apache Tomcat=4.1.27

Apache Tomcat=4.1.30

Apache Tomcat=4.1.7

Apache Tomcat=4.1.11

Apache Tomcat=4.1.18

Apache Tomcat=4.1.14

Apache Tomcat=4.1.19

Apache Tomcat=4.1.31

Apache Tomcat=4.1.16

Apache Tomcat=4.1.29

Apache Tomcat=4.1.22

Apache Tomcat=4.1.5

Apache Tomcat=4.1.26

Apache Tomcat=4.1.13

Apache Tomcat=4.1.8

Apache Tomcat=4.1.17

Apache Tomcat=5.5.0

Apache Tomcat=4.1.1

Apache Tomcat=4.1.12

Apache Tomcat=4.1.28

Apache Tomcat=4.1.15

Apache Tomcat=4.1.3-beta

Apache Tomcat=4.1.10

Apache Tomcat=4.1.0

Apache Tomcat=4.1.20

Apache Tomcat=4.1.3

Apache Tomcat=4.1.23

Apache Tomcat=4.1.6

Apache Tomcat=4.1.9

Event History

Oct 13, 2008

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the vulnerability in CVE-2008-3271?

CVE-2008-3271 allows remote attackers to bypass IP address restrictions and access sensitive information due to thread synchronization issues in Apache Tomcat.

What versions of Apache Tomcat are affected by CVE-2008-3271?

CVE-2008-3271 affects Apache Tomcat versions 4.1.0 through 4.1.31 and 5.5.0.

What are the potential impacts of CVE-2008-3271?

The vulnerability can lead to an instance-variable overwrite, potentially exposing sensitive data and compromising system integrity.

How do I fix CVE-2008-3271?

To fix CVE-2008-3271, upgrade Apache Tomcat to a secure version that is not vulnerable, specifically versions later than 4.1.31 or 5.5.0.

Is CVE-2008-3271 a critical vulnerability?

CVE-2008-3271 is considered a significant vulnerability due to its potential to allow unauthorized access and exposure of sensitive information.