fkie_cve-2011-2729
Vulnerability from fkie_nvd
Published
2011-08-15 21:55
Modified
2024-11-21 01:28
Severity ?
Summary
native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.
References
secalert@redhat.comhttp://lists.opensuse.org/opensuse-security-announce/2011-09/msg00024.html
secalert@redhat.comhttp://mail-archives.apache.org/mod_mbox/commons-dev/201108.mbox/%3C4E451B2B.9090108%40apache.org%3E
secalert@redhat.comhttp://mail-archives.apache.org/mod_mbox/tomcat-announce/201108.mbox/%3C4E45221D.1020306%40apache.org%3E
secalert@redhat.comhttp://marc.info/?l=bugtraq&m=132215163318824&w=2
secalert@redhat.comhttp://marc.info/?l=bugtraq&m=132215163318824&w=2
secalert@redhat.comhttp://marc.info/?l=bugtraq&m=133469267822771&w=2
secalert@redhat.comhttp://marc.info/?l=bugtraq&m=133469267822771&w=2
secalert@redhat.comhttp://marc.info/?l=bugtraq&m=136485229118404&w=2
secalert@redhat.comhttp://marc.info/?l=bugtraq&m=136485229118404&w=2
secalert@redhat.comhttp://marc.info/?l=bugtraq&m=139344343412337&w=2
secalert@redhat.comhttp://people.apache.org/~markt/patches/2011-08-12-cve2011-2729-tc5.patch
secalert@redhat.comhttp://secunia.com/advisories/46030
secalert@redhat.comhttp://secunia.com/advisories/57126
secalert@redhat.comhttp://securitytracker.com/id?1025925
secalert@redhat.comhttp://svn.apache.org/viewvc?view=revision&revision=1152701
secalert@redhat.comhttp://svn.apache.org/viewvc?view=revision&revision=1153379
secalert@redhat.comhttp://svn.apache.org/viewvc?view=revision&revision=1153824
secalert@redhat.comhttp://tomcat.apache.org/security-5.htmlVendor Advisory
secalert@redhat.comhttp://tomcat.apache.org/security-6.htmlVendor Advisory
secalert@redhat.comhttp://tomcat.apache.org/security-7.htmlVendor Advisory
secalert@redhat.comhttp://www.redhat.com/support/errata/RHSA-2011-1291.html
secalert@redhat.comhttp://www.redhat.com/support/errata/RHSA-2011-1292.html
secalert@redhat.comhttp://www.securityfocus.com/archive/1/519263/100/0/threaded
secalert@redhat.comhttp://www.securityfocus.com/bid/49143
secalert@redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=730400
secalert@redhat.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/69161
secalert@redhat.comhttps://issues.apache.org/jira/browse/DAEMON-214
secalert@redhat.comhttps://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
secalert@redhat.comhttps://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E
secalert@redhat.comhttps://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
secalert@redhat.comhttps://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E
secalert@redhat.comhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14743
secalert@redhat.comhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19450
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00024.html
af854a3a-2127-422b-91ae-364da2661108http://mail-archives.apache.org/mod_mbox/commons-dev/201108.mbox/%3C4E451B2B.9090108%40apache.org%3E
af854a3a-2127-422b-91ae-364da2661108http://mail-archives.apache.org/mod_mbox/tomcat-announce/201108.mbox/%3C4E45221D.1020306%40apache.org%3E
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=132215163318824&w=2
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=132215163318824&w=2
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=133469267822771&w=2
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=133469267822771&w=2
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=136485229118404&w=2
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=136485229118404&w=2
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=139344343412337&w=2
af854a3a-2127-422b-91ae-364da2661108http://people.apache.org/~markt/patches/2011-08-12-cve2011-2729-tc5.patch
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/46030
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/57126
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1025925
af854a3a-2127-422b-91ae-364da2661108http://svn.apache.org/viewvc?view=revision&revision=1152701
af854a3a-2127-422b-91ae-364da2661108http://svn.apache.org/viewvc?view=revision&revision=1153379
af854a3a-2127-422b-91ae-364da2661108http://svn.apache.org/viewvc?view=revision&revision=1153824
af854a3a-2127-422b-91ae-364da2661108http://tomcat.apache.org/security-5.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://tomcat.apache.org/security-6.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://tomcat.apache.org/security-7.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2011-1291.html
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2011-1292.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/519263/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/49143
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=730400
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/69161
af854a3a-2127-422b-91ae-364da2661108https://issues.apache.org/jira/browse/DAEMON-214
af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14743
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19450
Impacted products
Vendor Product Version
apache apache_commons_daemon 1.0.3
apache apache_commons_daemon 1.0.4
apache apache_commons_daemon 1.0.5
apache apache_commons_daemon 1.0.6
apache tomcat 5.5.32
apache tomcat 5.5.33
linux linux_kernel *
apache apache_commons_daemon 1.0.3
apache apache_commons_daemon 1.0.4
apache apache_commons_daemon 1.0.5
apache apache_commons_daemon 1.0.6
apache tomcat 6.0.30
apache tomcat 6.0.31
apache tomcat 6.0.32
linux linux_kernel *
apache apache_commons_daemon 1.0.3
apache apache_commons_daemon 1.0.4
apache apache_commons_daemon 1.0.5
apache apache_commons_daemon 1.0.6
apache tomcat 7.0.0
apache tomcat 7.0.0
apache tomcat 7.0.1
apache tomcat 7.0.2
apache tomcat 7.0.3
apache tomcat 7.0.4
apache tomcat 7.0.5
apache tomcat 7.0.6
apache tomcat 7.0.7
apache tomcat 7.0.8
apache tomcat 7.0.9
apache tomcat 7.0.10
apache tomcat 7.0.11
apache tomcat 7.0.12
apache tomcat 7.0.13
apache tomcat 7.0.14
apache tomcat 7.0.16
apache tomcat 7.0.17
apache tomcat 7.0.19
linux linux_kernel *


To clipboard 

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "6AB9C8A4-9E4F-4B5E-B20E-01B0C6DA623E",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "EC41DBC3-1DA3-4C63-A360-253937FE2409",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "175FC97E-F4C2-43BA-BEF8-66DA0BC627C1",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "B69A27DD-4056-4644-AA16-70B16642FAA7",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:5.5.32:*:*:*:*:*:*:*",
                     matchCriteriaId: "7B980C39-A4D8-483A-B48C-36CA4F5CEAA1",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:5.5.33:*:*:*:*:*:*:*",
                     matchCriteriaId: "DFF7178D-DC9B-45F7-BEA4-701B1EAEC2CC",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "155AD4FB-E527-4103-BCEF-801B653DEA37",
                     vulnerable: false,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "6AB9C8A4-9E4F-4B5E-B20E-01B0C6DA623E",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "EC41DBC3-1DA3-4C63-A360-253937FE2409",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "175FC97E-F4C2-43BA-BEF8-66DA0BC627C1",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "B69A27DD-4056-4644-AA16-70B16642FAA7",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:6.0.30:*:*:*:*:*:*:*",
                     matchCriteriaId: "A9E03BE3-60CC-4415-B993-D0BB00F87A30",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:6.0.31:*:*:*:*:*:*:*",
                     matchCriteriaId: "CE92E59A-FF0D-4D1A-8B12-CC41A7E1FD3C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:6.0.32:*:*:*:*:*:*:*",
                     matchCriteriaId: "BFD64FE7-ABAF-49F3-B8D0-91C37C822F4B",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "155AD4FB-E527-4103-BCEF-801B653DEA37",
                     vulnerable: false,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "6AB9C8A4-9E4F-4B5E-B20E-01B0C6DA623E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "EC41DBC3-1DA3-4C63-A360-253937FE2409",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "175FC97E-F4C2-43BA-BEF8-66DA0BC627C1",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:apache_commons_daemon:1.0.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "B69A27DD-4056-4644-AA16-70B16642FAA7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "0F8C62EF-1B67-456A-9C66-755439CF8556",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*",
                     matchCriteriaId: "33E9607B-4D28-460D-896B-E4B7FA22441E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "A819E245-D641-4F19-9139-6C940504F6E7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "8C381275-10C5-4939-BCE3-0D1F3B3CB2EE",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "7205475A-6D04-4042-B24E-1DA5A57029B7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "08022987-B36B-4F63-88A5-A8F59195DF4A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "FF4B7557-EF35-451E-B55D-3296966695AC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "8980E61E-27BE-4858-82B3-C0E8128AF521",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "8756BF9B-3E24-4677-87AE-31CE776541F0",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "88CE057E-2092-4C98-8D0C-75CF439D0A9C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "8F194580-EE6D-4E38-87F3-F0661262256B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "A9731BAA-4C6C-4259-B786-F577D8A90FA1",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "1F74A421-D019-4248-84B8-C70D4D9A8A95",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "2BA27FF9-4C66-4E17-95C0-1CB2DAA6AFC8",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "05346F5A-FB52-4376-AAC7-9A5308216545",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*",
                     matchCriteriaId: "305688F2-50A6-41FB-8614-BC589DB9A789",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*",
                     matchCriteriaId: "25966344-15D5-4101-9346-B06BFD2DFFF5",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*",
                     matchCriteriaId: "11F4CBAC-27B1-4EFF-955A-A63B457D0578",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*",
                     matchCriteriaId: "0D4F710E-06EA-48F4-AC6A-6F143950F015",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "155AD4FB-E527-4103-BCEF-801B653DEA37",
                     vulnerable: false,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.",
      },
      {
         lang: "es",
         value: "native/unix/native/jsvc-unix.c en jsvc en el componente Daemon v1.0.3 hasta v1.0.6  en Apache Commons, usado en Apache Tomcat  v5.5.32 hasta v5.5.33, v6.0.30 hasta v6.0.32, y v7.0.x anterior a v7.0.20 en LinuxApache Commons, no elimina permisos, lo que permite a atacantes remotos evitar permisos de lectura para ficheros a través de una petición en una aplicación.",
      },
   ],
   id: "CVE-2011-2729",
   lastModified: "2024-11-21T01:28:50.943",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "MEDIUM",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "NONE",
               baseScore: 5,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "NONE",
               vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:N",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 2.9,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2011-08-15T21:55:02.330",
   references: [
      {
         source: "secalert@redhat.com",
         url: "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00024.html",
      },
      {
         source: "secalert@redhat.com",
         url: "http://mail-archives.apache.org/mod_mbox/commons-dev/201108.mbox/%3C4E451B2B.9090108%40apache.org%3E",
      },
      {
         source: "secalert@redhat.com",
         url: "http://mail-archives.apache.org/mod_mbox/tomcat-announce/201108.mbox/%3C4E45221D.1020306%40apache.org%3E",
      },
      {
         source: "secalert@redhat.com",
         url: "http://marc.info/?l=bugtraq&m=132215163318824&w=2",
      },
      {
         source: "secalert@redhat.com",
         url: "http://marc.info/?l=bugtraq&m=132215163318824&w=2",
      },
      {
         source: "secalert@redhat.com",
         url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
      },
      {
         source: "secalert@redhat.com",
         url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
      },
      {
         source: "secalert@redhat.com",
         url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
      },
      {
         source: "secalert@redhat.com",
         url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
      },
      {
         source: "secalert@redhat.com",
         url: "http://marc.info/?l=bugtraq&m=139344343412337&w=2",
      },
      {
         source: "secalert@redhat.com",
         url: "http://people.apache.org/~markt/patches/2011-08-12-cve2011-2729-tc5.patch",
      },
      {
         source: "secalert@redhat.com",
         url: "http://secunia.com/advisories/46030",
      },
      {
         source: "secalert@redhat.com",
         url: "http://secunia.com/advisories/57126",
      },
      {
         source: "secalert@redhat.com",
         url: "http://securitytracker.com/id?1025925",
      },
      {
         source: "secalert@redhat.com",
         url: "http://svn.apache.org/viewvc?view=revision&revision=1152701",
      },
      {
         source: "secalert@redhat.com",
         url: "http://svn.apache.org/viewvc?view=revision&revision=1153379",
      },
      {
         source: "secalert@redhat.com",
         url: "http://svn.apache.org/viewvc?view=revision&revision=1153824",
      },
      {
         source: "secalert@redhat.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://tomcat.apache.org/security-5.html",
      },
      {
         source: "secalert@redhat.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://tomcat.apache.org/security-6.html",
      },
      {
         source: "secalert@redhat.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://tomcat.apache.org/security-7.html",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.redhat.com/support/errata/RHSA-2011-1291.html",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.redhat.com/support/errata/RHSA-2011-1292.html",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.securityfocus.com/archive/1/519263/100/0/threaded",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.securityfocus.com/bid/49143",
      },
      {
         source: "secalert@redhat.com",
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=730400",
      },
      {
         source: "secalert@redhat.com",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/69161",
      },
      {
         source: "secalert@redhat.com",
         url: "https://issues.apache.org/jira/browse/DAEMON-214",
      },
      {
         source: "secalert@redhat.com",
         url: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E",
      },
      {
         source: "secalert@redhat.com",
         url: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E",
      },
      {
         source: "secalert@redhat.com",
         url: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E",
      },
      {
         source: "secalert@redhat.com",
         url: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E",
      },
      {
         source: "secalert@redhat.com",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14743",
      },
      {
         source: "secalert@redhat.com",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19450",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00024.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://mail-archives.apache.org/mod_mbox/commons-dev/201108.mbox/%3C4E451B2B.9090108%40apache.org%3E",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://mail-archives.apache.org/mod_mbox/tomcat-announce/201108.mbox/%3C4E45221D.1020306%40apache.org%3E",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://marc.info/?l=bugtraq&m=132215163318824&w=2",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://marc.info/?l=bugtraq&m=132215163318824&w=2",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://marc.info/?l=bugtraq&m=139344343412337&w=2",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://people.apache.org/~markt/patches/2011-08-12-cve2011-2729-tc5.patch",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/46030",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/57126",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://securitytracker.com/id?1025925",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://svn.apache.org/viewvc?view=revision&revision=1152701",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://svn.apache.org/viewvc?view=revision&revision=1153379",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://svn.apache.org/viewvc?view=revision&revision=1153824",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://tomcat.apache.org/security-5.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://tomcat.apache.org/security-6.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://tomcat.apache.org/security-7.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.redhat.com/support/errata/RHSA-2011-1291.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.redhat.com/support/errata/RHSA-2011-1292.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/archive/1/519263/100/0/threaded",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/49143",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=730400",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/69161",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://issues.apache.org/jira/browse/DAEMON-214",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14743",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19450",
      },
   ],
   sourceIdentifier: "secalert@redhat.com",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-264",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.