Логотип exploitDog
bind:CVE-2007-3385
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2007-3385

Количество 6

Количество 6

ubuntu логотип

CVE-2007-3385

больше 18 лет назад

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

CVSS2: 4.3
EPSS: Высокий
redhat логотип

CVE-2007-3385

больше 18 лет назад

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

EPSS: Высокий
nvd логотип

CVE-2007-3385

больше 18 лет назад

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

CVSS2: 4.3
EPSS: Высокий
debian логотип

CVE-2007-3385

больше 18 лет назад

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 ...

CVSS2: 4.3
EPSS: Высокий
github логотип

GHSA-6j8f-66vh-39mj

больше 3 лет назад

Apache Tomcat Mishandles Character Sequence in Cookies

EPSS: Высокий
oracle-oval логотип

ELSA-2007-0871

около 18 лет назад

ELSA-2007-0871: Moderate: tomcat security update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2007-3385

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

CVSS2: 4.3
76%
Высокий
больше 18 лет назад
redhat логотип
CVE-2007-3385

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

76%
Высокий
больше 18 лет назад
nvd логотип
CVE-2007-3385

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

CVSS2: 4.3
76%
Высокий
больше 18 лет назад
debian логотип
CVE-2007-3385

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 ...

CVSS2: 4.3
76%
Высокий
больше 18 лет назад
github логотип
GHSA-6j8f-66vh-39mj

Apache Tomcat Mishandles Character Sequence in Cookies

76%
Высокий
больше 3 лет назад
oracle-oval логотип
ELSA-2007-0871

ELSA-2007-0871: Moderate: tomcat security update (MODERATE)

около 18 лет назад

Уязвимостей на страницу