Apache Tomcat CVE-2013-4286 Security Bypass Vulnerability

Bugtraq ID: 65773
Class: Design Error
CVE: CVE-2013-4286
Remote: Yes
Local: No
Published: Feb 25 2014 12:00AM
Updated: Oct 29 2014 12:59AM
Credit: Apache Tomcat security team
Vulnerable: Red Hat Enterprise Linux Workstation Optional 6
Red Hat Enterprise Linux Workstation 6
Red Hat Enterprise Linux Server Optional 6
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux HPC Node Optional 6
Red Hat Enterprise Linux HPC Node 6
Red Hat Enterprise Linux Desktop Optional 6
Red Hat Enterprise Linux Desktop 6
Oracle Enterprise Linux 6.2
Oracle Enterprise Linux 6
IBM Storwize V7000 Unified 1.3.1.0
IBM Storwize V7000 Unified 1.3.0.5
IBM Storwize V7000 Unified 1.3.0.0
IBM Scale Out Network Attached Storage 1.3.0.5
IBM Scale Out Network Attached Storage 1.3.0.4
Debian Linux 6.0 sparc
Debian Linux 6.0 s/390
Debian Linux 6.0 powerpc
Debian Linux 6.0 mips
Debian Linux 6.0 ia-64
Debian Linux 6.0 ia-32
Debian Linux 6.0 arm
Debian Linux 6.0 amd64
CentOS CentOS 6
Avaya Proactive Contact 5.0
Avaya Messaging Application Server 5.2
Avaya Meeting Exchange 6.0
Avaya Meeting Exchange 5.2 SP2
Avaya Meeting Exchange 5.2 SP1
Avaya Meeting Exchange 5.2
Avaya Meeting Exchange 5.1 SP1
Avaya Meeting Exchange 5.1
Avaya Meeting Exchange 5.0 SP2
Avaya Meeting Exchange 5.0 SP1
Avaya Meeting Exchange 5.0
Avaya IP Office Application Server 8.1
Avaya IP Office Application Server 8.0
Avaya Communication Server 1000M Signaling Server 7.5
Avaya Communication Server 1000M Signaling Server 7.0
Avaya Communication Server 1000M 7.5
Avaya Communication Server 1000M 7.0
Avaya Communication Server 1000E Signaling Server 7.5
Avaya Communication Server 1000E Signaling Server 7.0
Avaya Communication Server 1000E 7.5
Avaya Communication Server 1000E 7.0
Avaya Aura System Platform 6.0.2
Avaya Aura System Platform 6.0.1
Avaya Aura System Platform 6.0 SP3
Avaya Aura System Platform 6.0 SP2
Avaya Aura System Platform 6.0
Avaya Aura Presence Services 6.1.1
Avaya Aura Presence Services 6.1
Avaya Aura Presence Services 6.0
Avaya Aura Messaging 6.1
+ Avaya Communication Manager Server DEFINITY Server SI/CS
+ Avaya Communication Manager Server S8100
+ Avaya Communication Manager Server S8300
+ Avaya Communication Manager Server S8500
+ Avaya Communication Manager Server S8700
Avaya Aura Messaging 6.0.1
Avaya Aura Messaging 6.0
Avaya Aura Experience Portal 6.0
Avaya Aura Conferencing 6.0 Standard
Avaya Aura Application Server 5300 SIP Core 2.1
Avaya Aura Application Server 5300 SIP Core 2.0
Avaya Aura Application Enablement Services 6.1.1
Avaya Aura Application Enablement Services 6.1
Apache Software Foundation Tomcat 7.0.23
Apache Software Foundation Tomcat 7.0.16
Apache Software Foundation Tomcat 7.0.15
Apache Software Foundation Tomcat 7.0.14
Apache Software Foundation Tomcat 7.0.13
Apache Software Foundation Tomcat 7.0.12
Apache Software Foundation Tomcat 7.0.4
Apache Software Foundation Tomcat 7.0.3
Apache Software Foundation Tomcat 7.0.2
Apache Software Foundation Tomcat 7.0.1
Apache Software Foundation Tomcat 7.0 beta
Apache Software Foundation Tomcat 7.0
Apache Software Foundation Tomcat 6.0.35
Apache Software Foundation Tomcat 6.0.29
Apache Software Foundation Tomcat 6.0.28
Apache Software Foundation Tomcat 6.0.27
Apache Software Foundation Tomcat 6.0.26
Apache Software Foundation Tomcat 6.0.25
Apache Software Foundation Tomcat 6.0.24
Apache Software Foundation Tomcat 6.0.20
Apache Software Foundation Tomcat 6.0.18
Apache Software Foundation Tomcat 6.0.17
Apache Software Foundation Tomcat 6.0.16
Apache Software Foundation Tomcat 6.0.15
Apache Software Foundation Tomcat 6.0.14
Apache Software Foundation Tomcat 6.0.13
Apache Software Foundation Tomcat 6.0.12
Apache Software Foundation Tomcat 6.0.11
Apache Software Foundation Tomcat 6.0.10
Apache Software Foundation Tomcat 6.0.3
Apache Software Foundation Tomcat 6.0.2
Apache Software Foundation Tomcat 6.0.1
Apache Software Foundation Tomcat 6.0
Apache Software Foundation Tomcat 7.0.22
Apache Software Foundation Tomcat 7.0.21
Apache Software Foundation Tomcat 7.0.20
Apache Software Foundation Tomcat 7.0.19
Apache Software Foundation Tomcat 7.0.18
Apache Software Foundation Tomcat 7.0.17
Apache Software Foundation Tomcat 7.0.11
Apache Software Foundation Tomcat 7.0.10
Apache Software Foundation Tomcat 6.0.33
Apache Software Foundation Tomcat 6.0.32
Apache Software Foundation Tomcat 6.0.31
Apache Software Foundation Tomcat 6.0.30
Apache Software Foundation Tomcat 6.0.19
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus