CVE-2011-1184: Medium severity tomcat vulnerability
Multiple security flaws were found in the Apache Tomcat HTTP DIGEST (RFC 2069) Authentication implementation: it was possible to perform session reply attacks, server generated nonce-values were not checked, count of client generated nonce-values were not checked, quality of protection (qop) values were not checked, realms values were not checked, a known, hard-coded string was used as server secret.
References: [1] http://tomcat.apache.org/security-5.html [2] http://tomcat.apache.org/security-6.html [3] http://www.securityfocus.com/archive/1/519818/30/0/threaded
Relevant upstream patches: [4] http://svn.apache.org/viewvc?view=revision&revision=1158180 (for Tomcat 6 version), [5] http://svn.apache.org/viewvc?view=revision&revision=1159309 (for Tomcat 5 version).
Other sources
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.
— GitHub
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1184?
CVE-2011-1184 has been classified with a severity of medium due to potential session replay attacks and nonce handling issues.
How do I fix CVE-2011-1184?
To fix CVE-2011-1184, upgrade to Apache Tomcat version 5.5.34, 6.0.33, or 7.0.12 or later.
What versions of Apache Tomcat are affected by CVE-2011-1184?
CVE-2011-1184 affects Apache Tomcat versions 5.5.0 through 5.5.33, as well as 6.0.0 through 6.0.32, and 7.0.0 through 7.0.11.
What types of attacks does CVE-2011-1184 expose Apache Tomcat to?
CVE-2011-1184 exposes Apache Tomcat to session replay attacks and nonce value manipulation.
Is there a patch available for CVE-2011-1184?
Yes, a patch is available by upgrading to the specified safe versions of Apache Tomcat.