CVE-2009-0580 : Détail

CVE-2009-0580

A01-Broken Access Control
96.94%V3
Network
2009-06-05
13h25 +00:00
2020-02-13
15h08 +00:00
CVE.org
NVD
Notifications pour un CVE
Restez informé de toutes modifications pour un CVE spécifique.
Gestion des notifications

Descriptions du CVE

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.

Informations du CVE

Faiblesses connexes

CWE-ID Nom de la faiblesse Source
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Métriques

Métriques Score Gravité CVSS Vecteur Source
V2 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N nvd@nist.gov

EPSS

EPSS est un modèle de notation qui prédit la probabilité qu'une vulnérabilité soit exploitée.

Score EPSS

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Percentile EPSS

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.
EPSS First.org

Informations sur l'Exploit

Exploit Database EDB-ID : 33023

Date de publication : 2009-06-02 22h00 +00:00
Auteur : D. Matscheko
EDB Vérifié : Yes

source: https://www.securityfocus.com/bid/35196/info Apache Tomcat is prone to a username-enumeration weakness because it displays different responses to login attempts, depending on whether or not the username exists. Attackers may exploit this weakness to discern valid usernames. This may aid them in brute-force password cracking or other attacks. The following are vulnerable: Tomcat 4.1.x (prior to 4.1.40) Tomcat 5.5x (prior to 5.5.28) Tomcat 6.0.x (prior to 6.0.20) The following example POST data is available: POST /j_security_check HTTP/1.1 Host: www.example.com j_username=tomcat&j_password=%

Products Mentioned

Configuraton 0

Apache>>Tomcat >> Version 4.1.0

Apache>>Tomcat >> Version 4.1.1

Apache>>Tomcat >> Version 4.1.2

Apache>>Tomcat >> Version 4.1.3

Apache>>Tomcat >> Version 4.1.3

Apache>>Tomcat >> Version 4.1.4

Apache>>Tomcat >> Version 4.1.5

Apache>>Tomcat >> Version 4.1.6

Apache>>Tomcat >> Version 4.1.7

    Apache>>Tomcat >> Version 4.1.8

    Apache>>Tomcat >> Version 4.1.9

    Apache>>Tomcat >> Version 4.1.9

    Apache>>Tomcat >> Version 4.1.10

    Apache>>Tomcat >> Version 4.1.11

    Apache>>Tomcat >> Version 4.1.12

    Apache>>Tomcat >> Version 4.1.13

    Apache>>Tomcat >> Version 4.1.14

    Apache>>Tomcat >> Version 4.1.15

    Apache>>Tomcat >> Version 4.1.16

    Apache>>Tomcat >> Version 4.1.17

    Apache>>Tomcat >> Version 4.1.18

    Apache>>Tomcat >> Version 4.1.19

    Apache>>Tomcat >> Version 4.1.20

    Apache>>Tomcat >> Version 4.1.21

    Apache>>Tomcat >> Version 4.1.22

    Apache>>Tomcat >> Version 4.1.23

    Apache>>Tomcat >> Version 4.1.24

    Apache>>Tomcat >> Version 4.1.25

    Apache>>Tomcat >> Version 4.1.26

    Apache>>Tomcat >> Version 4.1.27

    Apache>>Tomcat >> Version 4.1.28

    Apache>>Tomcat >> Version 4.1.29

    Apache>>Tomcat >> Version 4.1.30

    Apache>>Tomcat >> Version 4.1.31

    Apache>>Tomcat >> Version 4.1.32

    Apache>>Tomcat >> Version 4.1.33

    Apache>>Tomcat >> Version 4.1.34

      Apache>>Tomcat >> Version 4.1.35

      Apache>>Tomcat >> Version 4.1.36

      Apache>>Tomcat >> Version 4.1.37

      Apache>>Tomcat >> Version 4.1.38

      Apache>>Tomcat >> Version 4.1.39

      Apache>>Tomcat >> Version 5.5.0

      Apache>>Tomcat >> Version 5.5.1

      Apache>>Tomcat >> Version 5.5.2

      Apache>>Tomcat >> Version 5.5.3

      Apache>>Tomcat >> Version 5.5.4

      Apache>>Tomcat >> Version 5.5.5

      Apache>>Tomcat >> Version 5.5.6

      Apache>>Tomcat >> Version 5.5.7

      Apache>>Tomcat >> Version 5.5.8

      Apache>>Tomcat >> Version 5.5.9

      Apache>>Tomcat >> Version 5.5.10

      Apache>>Tomcat >> Version 5.5.11

      Apache>>Tomcat >> Version 5.5.12

      Apache>>Tomcat >> Version 5.5.13

      Apache>>Tomcat >> Version 5.5.14

      Apache>>Tomcat >> Version 5.5.15

      Apache>>Tomcat >> Version 5.5.16

      Apache>>Tomcat >> Version 5.5.17

      Apache>>Tomcat >> Version 5.5.18

      Apache>>Tomcat >> Version 5.5.19

      Apache>>Tomcat >> Version 5.5.20

      Apache>>Tomcat >> Version 5.5.21

      Apache>>Tomcat >> Version 5.5.22

      Apache>>Tomcat >> Version 5.5.23

      Apache>>Tomcat >> Version 5.5.24

      Apache>>Tomcat >> Version 5.5.25

      Apache>>Tomcat >> Version 5.5.26

      Apache>>Tomcat >> Version 5.5.27

      Apache>>Tomcat >> Version 6.0.0

      Apache>>Tomcat >> Version 6.0.1

      Apache>>Tomcat >> Version 6.0.2

      Apache>>Tomcat >> Version 6.0.3

      Apache>>Tomcat >> Version 6.0.4

      Apache>>Tomcat >> Version 6.0.5

      Apache>>Tomcat >> Version 6.0.6

      Apache>>Tomcat >> Version 6.0.7

      Apache>>Tomcat >> Version 6.0.8

      Apache>>Tomcat >> Version 6.0.9

      Apache>>Tomcat >> Version 6.0.10

      Apache>>Tomcat >> Version 6.0.11

      Apache>>Tomcat >> Version 6.0.12

      Apache>>Tomcat >> Version 6.0.13

      Apache>>Tomcat >> Version 6.0.14

      Apache>>Tomcat >> Version 6.0.15

      Apache>>Tomcat >> Version 6.0.16

      Références

      http://marc.info/?l=bugtraq&m=127420533226623&w=2
      Tags : vendor-advisory, x_refsource_HP
      http://secunia.com/advisories/35326
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://www.mandriva.com/security/advisories?name=MDVSA-2009:138
      Tags : vendor-advisory, x_refsource_MANDRIVA
      http://www.debian.org/security/2011/dsa-2207
      Tags : vendor-advisory, x_refsource_DEBIAN
      http://www.securityfocus.com/bid/35196
      Tags : vdb-entry, x_refsource_BID
      http://secunia.com/advisories/35344
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://marc.info/?l=bugtraq&m=136485229118404&w=2
      Tags : vendor-advisory, x_refsource_HP
      http://secunia.com/advisories/37460
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://www.vupen.com/english/advisories/2010/3056
      Tags : vdb-entry, x_refsource_VUPEN
      http://secunia.com/advisories/35788
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://marc.info/?l=bugtraq&m=127420533226623&w=2
      Tags : vendor-advisory, x_refsource_HP
      http://www.vupen.com/english/advisories/2009/1496
      Tags : vdb-entry, x_refsource_VUPEN
      http://marc.info/?l=bugtraq&m=133469267822771&w=2
      Tags : vendor-advisory, x_refsource_HP
      http://www.vupen.com/english/advisories/2009/1856
      Tags : vdb-entry, x_refsource_VUPEN
      http://securitytracker.com/id?1022332
      Tags : vdb-entry, x_refsource_SECTRACK
      http://www.mandriva.com/security/advisories?name=MDVSA-2010:176
      Tags : vendor-advisory, x_refsource_MANDRIVA
      http://secunia.com/advisories/42368
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://support.apple.com/kb/HT4077
      Tags : x_refsource_CONFIRM
      http://secunia.com/advisories/35685
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://marc.info/?l=bugtraq&m=133469267822771&w=2
      Tags : vendor-advisory, x_refsource_HP
      http://marc.info/?l=bugtraq&m=129070310906557&w=2
      Tags : vendor-advisory, x_refsource_HP
      http://marc.info/?l=bugtraq&m=136485229118404&w=2
      Tags : vendor-advisory, x_refsource_HP
      http://www.mandriva.com/security/advisories?name=MDVSA-2009:136
      Tags : vendor-advisory, x_refsource_MANDRIVA
      http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1
      Tags : vendor-advisory, x_refsource_SUNALERT
      http://marc.info/?l=bugtraq&m=129070310906557&w=2
      Tags : vendor-advisory, x_refsource_HP
      http://www.vupen.com/english/advisories/2009/3316
      Tags : vdb-entry, x_refsource_VUPEN