| ID |
CVE-2006-7197
|
| Summary |
The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 7.8 (as of 13-02-2023 - 02:17) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
NONE |
NONE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:C/I:N/A:N
|
| redhat
via4
|
| advisories | | | rpms | - jabberd-0:2.0s10-3.38.rhn
- java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4
- java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4
- jfreechart-0:0.9.20-3.rhn
- openmotif21-0:2.1.30-11.RHEL4.6
- openmotif21-debuginfo-0:2.1.30-11.RHEL4.6
- perl-Crypt-CBC-0:2.24-1.el4
- rhn-apache-0:1.3.27-36.rhn.rhel4
- rhn-modjk-ap13-0:1.2.23-2rhn.rhel4
- rhn-modperl-0:1.29-16.rhel4
- rhn-modssl-0:2.8.12-8.rhn.10.rhel4
- tomcat5-0:5.0.30-0jpp_10rh
- jabberd-0:2.0s10-3.37.rhn
- jabberd-0:2.0s10-3.38.rhn
- java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3
- java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4
- java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3
- java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4
- jfreechart-0:0.9.20-3.rhn
- openmotif21-0:2.1.30-11.RHEL4.6
- openmotif21-0:2.1.30-9.RHEL3.8
- openmotif21-debuginfo-0:2.1.30-11.RHEL4.6
- openmotif21-debuginfo-0:2.1.30-9.RHEL3.8
- perl-Crypt-CBC-0:2.24-1.el3
- perl-Crypt-CBC-0:2.24-1.el4
- rhn-apache-0:1.3.27-36.rhn.rhel3
- rhn-apache-0:1.3.27-36.rhn.rhel4
- rhn-modjk-ap13-0:1.2.23-2rhn.rhel3
- rhn-modjk-ap13-0:1.2.23-2rhn.rhel4
- rhn-modperl-0:1.29-16.rhel3
- rhn-modperl-0:1.29-16.rhel4
- rhn-modssl-0:2.8.12-8.rhn.10.rhel3
- rhn-modssl-0:2.8.12-8.rhn.10.rhel4
- tomcat5-0:5.0.30-0jpp_10rh
|
|
| refmap
via4
|
| bid | 28477 | | confirm | http://issues.apache.org/bugzilla/show_bug.cgi?id=38859 | | mlist | - [tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/
- [tomcat-dev] 20190325 svn commit: r1856174 [25/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/
- [tomcat-dev] 20190413 svn commit: r1857494 [18/20] - in /tomcat/site/trunk: ./ docs/ xdocs/
- [tomcat-dev] 20190415 svn commit: r1857582 [20/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/
- [tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/
- [tomcat-dev] 20200213 svn commit: r1873980 [30/34] - /tomcat/site/trunk/docs/
|
|
| Last major update |
13-02-2023 - 02:17 |
| Published |
25-04-2007 - 20:19 |
| Last modified |
13-02-2023 - 02:17 |
