Apache Tomcat Cookie Quote Handling Remote Information Disclosure Vulnerability

Bugtraq ID: 27706
Class: Input Validation Error
CVE: CVE-2007-5333
Remote: Yes
Local: No
Published: Feb 09 2008 12:00AM
Updated: May 07 2015 05:11PM
Credit: John Kew and Ishikawa Yoshihiro via JPCERT/CC are credited with the discovery of this vulnerability.
Vulnerable: WiKID Systems WiKID Server 3.0.4
VMWare VirtualCenter Management Server 2
VMWare VirtualCenter 2.0.2
VMWare VirtualCenter 2.5 Update 5
VMWare VirtualCenter 2.5 Update 2
VMWare VirtualCenter 2.5 Update 1
VMWare VirtualCenter 2.5
VMWare VirtualCenter 2.0.2 Update 5
VMWare VirtualCenter 2.0.2 Update 4
VMWare VirtualCenter 2.0.2 Update 3
VMWare VirtualCenter 2.0.2 Update 2
VMWare VirtualCenter 2.0.2 Update 1
VMWare vCenter 4.0
VMWare Server 2.0.2
VMWare Server 2.0.1
VMWare Server 2.0
VMWare ESX Server 3.0.3
VMWare ESX Server 3.0.2
VMWare ESX Server 3.0.1
VMWare ESX Server 3.0
VMWare ESX Server 4.0
VMWare ESX Server 3.5
SuSE SUSE Linux Enterprise Server 10 SP2
Sun Solaris 10
Rim Blackberry Enterprise Server for Novell Groupwise 5.0.1
Rim Blackberry Enterprise Server for Novell Groupwise 4.1.7
Rim Blackberry Enterprise Server for Novell Groupwise 4.1.4
Rim Blackberry Enterprise Server for Exchange 5.0.2 MR1
Rim Blackberry Enterprise Server for Exchange 5.0.2
Rim Blackberry Enterprise Server for Exchange 5.0.1
Rim Blackberry Enterprise Server for Exchange 5.0 SP2
Rim Blackberry Enterprise Server for Exchange 5.0
Rim Blackberry Enterprise Server for Exchange 4.1.7
Rim Blackberry Enterprise Server for Exchange 4.1.4
Rim Blackberry Enterprise Server for Domino 5.0.2 MR1
Rim Blackberry Enterprise Server for Domino 4.1.4
Rim Blackberry Enterprise Server Express for Exchange 5.0.2 MR1
Rim Blackberry Enterprise Server Express for Exchange 5.0.2
Rim Blackberry Enterprise Server Express for Exchange 5.0.1
Rim Blackberry Enterprise Server Express for Exchange 4.1.4
Rim Blackberry Enterprise Server Express for Domino 5.0.2 MR1
Rim Blackberry Enterprise Server Express for Domino 5.0.2
Rim Blackberry Enterprise Server Express for Domino 4.1.4
Redhat Network Satellite (for RHEL 4 AS) 5.3
Redhat Network Satellite (for RHEL 4 AS) 5.2
Redhat JBoss Enterprise Web Server EL4 0
Redhat JBoss Enterprise Web Server 5.0
Redhat Fedora 7
Redhat Enterprise Linux EUS 5.3.z server
Redhat Enterprise Linux Desktop Workstation 5 client
Redhat Enterprise Linux Desktop 5 client
Redhat Enterprise Linux 5 Server
Redhat Developer Suite AS4 3
Redhat Certificate Server 7.3
Redhat Application Server WS4 2
Redhat Application Server ES4 2
Redhat Application Server AS4 2
Pardus Linux 2008 0
Novell ZENworks Linux Management 7.3
Mandriva Linux Mandrake 2008.1 x86_64
Mandriva Linux Mandrake 2008.1
Mandriva Linux Mandrake 2008.0 x86_64
Mandriva Linux Mandrake 2008.0
IBM Tivoli Netcool/Webtop 2.1 Fix Pack 4
IBM Tivoli Netcool/Webtop 2.1
IBM Tivoli Netcool/Webtop 1.3.1
HP XP P9000 Performance Advisor 5.4.1
HP Network Node Manager i SPI 9.11
HP Network Node Manager i SPI 9.10
HP Network Node Manager i SPI 9.0
HP Network Node Manager i 9.11
HP Network Node Manager i 9.0
Gentoo www-servers/tomcat 6.0.15
Gentoo www-servers/tomcat 6.0.14
Gentoo www-servers/tomcat 6.0.13
Gentoo www-servers/tomcat 6.0.12
Gentoo www-servers/tomcat 6.0.11
Gentoo www-servers/tomcat 6.0.10
Gentoo www-servers/tomcat 6.0.9
Gentoo www-servers/tomcat 6.0.8
Gentoo www-servers/tomcat 6.0.7
Gentoo www-servers/tomcat 6.0.6
Gentoo www-servers/tomcat 6.0.5
Gentoo www-servers/tomcat 6.0.4
Gentoo www-servers/tomcat 6.0.3
Gentoo www-servers/tomcat 6.0.2
Gentoo www-servers/tomcat 6.0.1
Gentoo www-servers/tomcat 6.0
Apple Mac OS X Server 10.5.5
Apple Mac OS X Server 10.4.11
Apple Mac OS X Server 10.4.10
Apple Mac OS X Server 10.4.9
Apple Mac OS X Server 10.4.8
Apple Mac OS X Server 10.4.7
Apple Mac OS X Server 10.4.6
Apple Mac OS X Server 10.4.5
Apple Mac OS X Server 10.4.4
Apple Mac OS X Server 10.4.3
Apple Mac OS X Server 10.4.2
Apple Mac OS X Server 10.4.1
Apple Mac OS X Server 10.4
Apple Mac OS X 10.4.11
Apple Mac OS X 10.4.10
Apple Mac OS X 10.4.9
Apple Mac OS X 10.4.8
Apple Mac OS X 10.4.7
Apple Mac OS X 10.4.6
Apple Mac OS X 10.4.5
Apple Mac OS X 10.4.4
Apple Mac OS X 10.4.3
Apple Mac OS X 10.4.2
Apple Mac OS X 10.4.1
Apple Mac OS X 10.4
Apache Tomcat 6.0.15
Apache Tomcat 6.0.14
Apache Tomcat 6.0.13
Apache Tomcat 6.0.12
Apache Tomcat 6.0.11
Apache Tomcat 6.0.10
Apache Tomcat 6.0.9
Apache Tomcat 6.0.8
Apache Tomcat 6.0.7
Apache Tomcat 6.0.6
Apache Tomcat 6.0.5
Apache Tomcat 6.0.4
Apache Tomcat 6.0.3
Apache Tomcat 6.0.2
Apache Tomcat 6.0.1
Apache Tomcat 6.0
Apache Tomcat 5.5.25
Apache Tomcat 5.5.24
Apache Tomcat 5.5.23
Apache Tomcat 5.5.22
Apache Tomcat 5.5.21
Apache Tomcat 5.5.20
Apache Tomcat 5.5.19
Apache Tomcat 5.5.18
Apache Tomcat 5.5.17
Apache Tomcat 5.5.16
Apache Tomcat 5.5.15
Apache Tomcat 5.5.14
Apache Tomcat 5.5.13
Apache Tomcat 5.5.12
Apache Tomcat 5.5.11
Apache Tomcat 5.5.10
Apache Tomcat 5.5.9
Apache Tomcat 5.5.8
Apache Tomcat 5.5.7
Apache Tomcat 5.5.6
Apache Tomcat 5.5.5
Apache Tomcat 5.5.4
Apache Tomcat 5.5.3
Apache Tomcat 5.5.2
Apache Tomcat 5.5.1
Apache Tomcat 5.5
Apache Tomcat 5.4
Apache Tomcat 5.3
Apache Tomcat 5.2
Apache Tomcat 5.1
Apache Tomcat 5.0.31
Apache Tomcat 5.0.30
Apache Tomcat 5.0.28
Apache Tomcat 5.0.19
Apache Tomcat 5.0.16
Apache Tomcat 5.0.15
Apache Tomcat 5.0.14
Apache Tomcat 5.0.13
Apache Tomcat 5.0.12
Apache Tomcat 5.0.11
Apache Tomcat 5.0.10
Apache Tomcat 5.0.9
Apache Tomcat 5.0.8
Apache Tomcat 5.0.7
Apache Tomcat 5.0.6
Apache Tomcat 5.0.5
Apache Tomcat 5.0.4
Apache Tomcat 5.0.3
Apache Tomcat 5.0.2
Apache Tomcat 5.0.1
Apache Tomcat 5.0
Apache Tomcat 4.1.36
Apache Tomcat 4.1.34
Apache Tomcat 4.1.32
Apache Tomcat 4.1.31
Apache Tomcat 4.1.24
Apache Tomcat 4.1.12
Apache Tomcat 4.1.10
Apache Tomcat 4.1.9 beta
Apache Tomcat 4.1.3 beta
Apache Tomcat 4.1
- BSDI BSD/OS 4.0
- Caldera OpenLinux 2.4
- Debian Linux 2.3
- Debian Linux 2.2
- Debian Linux 2.1
- Digital UNIX 4.0
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 4.5
- Mandriva Linux Mandrake 7.1
- Mandriva Linux Mandrake 7.0
- NetBSD NetBSD 1.4.2 x86
- NetBSD NetBSD 1.4.1 x86
- Redhat Linux 6.2 i386
- Redhat Linux 6.1 i386
- SGI IRIX 6.5
- SGI IRIX 6.4
- SGI IRIX 3.3
- Sun Solaris 8_sparc
- Sun Solaris 7.0
Apache Tomcat 5.0
Not Vulnerable: WiKID Systems WiKID Server 3.0.5
VMWare VirtualCenter 2.5 Update 6
VMWare vCenter 4.0 Update 1
IBM Tivoli Netcool/Webtop 2.1 Fix Pack 5
IBM Tivoli Netcool/Webtop 1.3.13
HP XP P9000 Performance Advisor 5.5.1
Apache Tomcat 6.0.16
Apache Tomcat 5.5.26
Apache Tomcat 4.1.37


 

Privacy Statement
Copyright 2010, SecurityFocus