Vulnerability Bulletins |
Ruta absoluta transversal en Apache Tomcat |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Confidencialidad |
| Dificulty | Principiante |
| Required attacker level | Acceso remoto con cuenta |
System information |
|
| Property | Value |
| Affected manufacturer | GNU/Linux |
| Affected software |
Apache Tomcat 4.0.0 <= 4.0.6 Apache Tomcat 4.1.0 Apache Tomcat 5.0.0 Apache Tomcat 5.5.0 <= 5.5.25 Apache Tomcat 6.0.0 <= 6.0.14 Sun Solaris 9 Sun Solaris 10 |
Description |
|
|
Se ha encontrado una vulnerabilidad de directorio transversal en Apache Tomcat en las versiones de la 4.0.0 a la 4.0.6, 4.1.0, 5.0.0, de la 5.5.0 a la 5.5.25, y de la 6.0.0 a la 6.0.14. La vulnerabilidad reside en un error no especificado bajo ciertas configuraciones. Un atacante local podría leer archivos arbitrarios mediante una petición de escritura WebDAV que especifica una entidad con una etiqueta SYSTEM. Existe un exploit público disponible |
|
Solution |
|
|
Actualización de software Mandriva (MDKSA-2007:241) Mandriva Linux 2007.1 X86 ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/tomcat5-5.5.17-6.2.4.1mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/tomcat5-admin-webapps-5.5.17-6.2.4.1mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/tomcat5-common-lib-5.5.17-6.2.4.1mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/tomcat5-jasper-5.5.17-6.2.4.1mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/tomcat5-jasper-javadoc-5.5.17-6.2.4.1mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/tomcat5-jsp-2.0-api-5.5.17-6.2.4.1mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/tomcat5-jsp-2.0-api-javadoc-5.5.17-6.2.4.1mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/tomcat5-server-lib-5.5.17-6.2.4.1mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/tomcat5-servlet-2.4-api-5.5.17-6.2.4.1mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/tomcat5-servlet-2.4-api-javadoc-5.5.17-6.2.4.1mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/tomcat5-webapps-5.5.17-6.2.4.1mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/SRPMS/main/updates/tomcat5-5.5.17-6.2.4.1mdv2007.1.src.rpm X86_64 ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/tomcat5-5.5.17-6.2.4.1mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/tomcat5-admin-webapps-5.5.17-6.2.4.1mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/tomcat5-common-lib-5.5.17-6.2.4.1mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/tomcat5-jasper-5.5.17-6.2.4.1mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/tomcat5-jasper-javadoc-5.5.17-6.2.4.1mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/tomcat5-jsp-2.0-api-5.5.17-6.2.4.1mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/tomcat5-jsp-2.0-api-javadoc-5.5.17-6.2.4.1mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/tomcat5-server-lib-5.5.17-6.2.4.1mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/tomcat5-servlet-2.4-api-5.5.17-6.2.4.1mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/tomcat5-servlet-2.4-api-javadoc-5.5.17-6.2.4.1mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/tomcat5-webapps-5.5.17-6.2.4.1mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/SRPMS/main/updates/tomcat5-5.5.17-6.2.4.1mdv2007.1.src.rpm Mandriva Linux 2008.0 X86 ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/tomcat5-5.5.23-9.2.10.1mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/tomcat5-admin-webapps-5.5.23-9.2.10.1mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/tomcat5-common-lib-5.5.23-9.2.10.1mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/tomcat5-jasper-5.5.23-9.2.10.1mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/tomcat5-jasper-javadoc-5.5.23-9.2.10.1mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/tomcat5-jsp-2.0-api-5.5.23-9.2.10.1mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/tomcat5-jsp-2.0-api-javadoc-5.5.23-9.2.10.1mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/tomcat5-server-lib-5.5.23-9.2.10.1mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/tomcat5-servlet-2.4-api-5.5.23-9.2.10.1mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/tomcat5-servlet-2.4-api-javadoc-5.5.23-9.2.10.1mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/tomcat5-webapps-5.5.23-9.2.10.1mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/SRPMS/main/updates/tomcat5-5.5.23-9.2.10.1mdv2008.0.src.rpm X86_64 ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/tomcat5-5.5.23-9.2.10.1mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/tomcat5-admin-webapps-5.5.23-9.2.10.1mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/tomcat5-common-lib-5.5.23-9.2.10.1mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/tomcat5-jasper-5.5.23-9.2.10.1mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/tomcat5-jasper-javadoc-5.5.23-9.2.10.1mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/tomcat5-jsp-2.0-api-5.5.23-9.2.10.1mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/tomcat5-jsp-2.0-api-javadoc-5.5.23-9.2.10.1mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/tomcat5-server-lib-5.5.23-9.2.10.1mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/tomcat5-servlet-2.4-api-5.5.23-9.2.10.1mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/tomcat5-servlet-2.4-api-javadoc-5.5.23-9.2.10.1mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/tomcat5-webapps-5.5.23-9.2.10.1mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/SRPMS/main/updates/tomcat5-5.5.23-9.2.10.1mdv2008.0.src.rpm Debian (DSA 1447-1) Debian Linux 4.0 Source http://security.debian.org/pool/updates/main/t/tomcat5.5/tomcat5.5_5.5.20.orig.tar.gz http://security.debian.org/pool/updates/main/t/tomcat5.5/tomcat5.5_5.5.20-2etch1.dsc http://security.debian.org/pool/updates/main/t/tomcat5.5/tomcat5.5_5.5.20-2etch1.diff.gz Architecture independent http://security.debian.org/pool/updates/main/t/tomcat5.5/libtomcat5.5-java_5.5.20-2etch1_all.deb http://security.debian.org/pool/updates/main/t/tomcat5.5/tomcat5.5-webapps_5.5.20-2etch1_all.deb http://security.debian.org/pool/updates/main/t/tomcat5.5/tomcat5.5_5.5.20-2etch1_all.deb http://security.debian.org/pool/updates/main/t/tomcat5.5/tomcat5.5-admin_5.5.20-2etch1_all.deb Debian (DSA 1453-1) Debian Linux 4.0 Source http://security.debian.org/pool/updates/main/t/tomcat5/tomcat5_5.0.30-12etch1.diff.gz http://security.debian.org/pool/updates/main/t/tomcat5/tomcat5_5.0.30-12etch1.dsc http://security.debian.org/pool/updates/main/t/tomcat5/tomcat5_5.0.30.orig.tar.gz Architecture independent http://security.debian.org/pool/updates/main/t/tomcat5/tomcat5_5.0.30-12etch1_all.deb http://security.debian.org/pool/updates/main/t/tomcat5/libtomcat5-java_5.0.30-12etch1_all.deb http://security.debian.org/pool/updates/main/t/tomcat5/tomcat5-admin_5.0.30-12etch1_all.deb http://security.debian.org/pool/updates/main/t/tomcat5/tomcat5-webapps_5.0.30-12etch1_all.deb Suse Linux Las actualizaciones pueden descargarse mediante YAST o del servidor FTP oficial de Suse Linux. Red Hat (RHSA-2008:0042-4) RHEL Desktop Workstation (v. 5 cliente) Red Hat Enterprise Linux (v. 5 servidor) Red Hat Enterprise Linux Desktop (v. 5 cliente) https://rhn.redhat.com/ Red Hat (RHSA-2008:0261-4) Red Hat Network Satellite (v. 5.0 para RHEL 4) https://rhn.redhat.com/ Sun (239312) Solaris 10 / SPARC / patch 122911-12 Solaris 9 / SPARC / patch 114016-02 y 113146-11 Solaris 10 / x86 / patch 122912-12 Solaris 9 / x86 / patch 114017-02 y 114145-10 http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage Red Hat (RHSA-2008:0630-3) Red Hat Network Satellite (v. 5.1 para RHEL 4) https://rhn.redhat.com/ |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2007-5461 |
| BID | 26070 |
Other resources |
|
|
Mandriva Security Advisory (MDKSA-2007:241) http://www.mandriva.com/security/advisories?name=MDKSA-2007:241 Debian Security Advisory (DSA 1447-1) http://lists.debian.org/debian-security-announce/debian-security-announce-2008/msg00004.html Debian Security Advisory (DSA 1453-1) http://lists.debian.org/debian-security-announce/debian-security-announce-2008/msg00011.html SUSE Security Advisory (SUSE-SR:2008:005) http://www.novell.com/linux/security/advisories/2008_5_sr.html Red Hat Security Advisory (RHSA-2008:0042-4) http://rhn.redhat.com/errata/RHSA-2008-0042.html Red Hat Security Advisory (RHSA-2008:0261-4) http://rhn.redhat.com/errata/RHSA-2008-0261.html Sun Alert Notification (239312) http://sunsolve.sun.com/search/document.do?assetkey=1-66-239312-1 Red Hat Security Advisory (RHSA-2008:0630-3) https://rhn.redhat.com/errata/RHSA-2008-0630.html |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2007-12-12 |
| 1.1 | Aviso emitido por Debian (DSA 1447-1) | 2008-01-07 |
| 1.2 | Aviso emitido por Debian (DSA 1453-1) | 2008-01-09 |
| 1.3 | Aviso emitido por Suse (SUSE-SR:2008:005) | 2008-03-07 |
| 1.4 | Aviso emitido por Red Hat (RHSA-2008:0042-4) | 2008-03-12 |
| 1.5 | Aviso emitido por Red Hat (RHSA-2008:0261-4) | 2008-05-21 |
| 1.6 | Aviso emitido por Sun (239312) | 2008-07-01 |
| 1.7 | Aviso emitido por Red Hat (RHSA-2008:0630-3) | 2008-08-19 |
| 1.8 | Aviso actualizado por Sun (239312) | 2008-09-08 |