Apache Tomcat Manager Component CVE-2013-6357 Cross Site Request Forgery Vulnerability

Bugtraq ID: 63515
Class: Input Validation Error
CVE: CVE-2013-6357
Remote: Yes
Local: No
Published: Oct 24 2013 12:00AM
Updated: Oct 24 2013 12:00AM
Credit: Ivano Binetti and Gianmarco Pirozzi
Vulnerable: Apache Tomcat 5.5.25
Apache Tomcat 5.5.24
Apache Tomcat 5.5.23
Apache Tomcat 5.5.22
Apache Tomcat 5.5.21
Apache Tomcat 5.5.20
+ Gentoo Linux 1.4 _rc3
 + Gentoo Linux 1.4 _rc2
 + Gentoo Linux 1.4 _rc1
 + Gentoo Linux 1.2
Apache Tomcat 5.5.19
Apache Tomcat 5.5.18
Apache Tomcat 5.5.17
Apache Tomcat 5.5.16
Apache Tomcat 5.5.15
Apache Tomcat 5.5.14
Apache Tomcat 5.5.13
Apache Tomcat 5.5.12
Apache Tomcat 5.5.11
Apache Tomcat 5.5.10
Apache Tomcat 5.5.9
Apache Tomcat 5.5.8
Apache Tomcat 5.5.7
Apache Tomcat 5.5.6
Apache Tomcat 5.5.5
Apache Tomcat 5.5.4
Apache Tomcat 5.5.3
Apache Tomcat 5.5.2
Apache Tomcat 5.5.1
Apache Tomcat 5.5
Apache Tomcat 5.4
Apache Tomcat 5.3
Apache Tomcat 5.2
Apache Tomcat 5.1
Apache Tomcat 5.0.31
Apache Tomcat 5.0.30
Apache Tomcat 5.0.28
Apache Tomcat 5.0.19
Apache Tomcat 5.0.16
Apache Tomcat 5.0.15
Apache Tomcat 5.0.14
Apache Tomcat 5.0.13
Apache Tomcat 5.0.12
Apache Tomcat 5.0.11
Apache Tomcat 5.0.10
Apache Tomcat 5.0.9
Apache Tomcat 5.0.8
Apache Tomcat 5.0.7
Apache Tomcat 5.0.6
Apache Tomcat 5.0.5
Apache Tomcat 5.0.4
Apache Tomcat 5.0.2
Apache Tomcat 5.0.1
Apache Tomcat 5.0
Apache Tomcat 4.1.40
Apache Tomcat 4.1.39
Apache Tomcat 4.1.38
Apache Tomcat 4.1.37
Apache Tomcat 4.1.36
Apache Tomcat 4.1.35
Apache Tomcat 4.1.34
+ Gentoo Linux 1.4 _rc3
 + Gentoo Linux 1.4 _rc2
 + Gentoo Linux 1.4 _rc1
 + Gentoo Linux 1.2
Apache Tomcat 4.1.32
Apache Tomcat 4.1.31
Apache Tomcat 4.1.30
Apache Tomcat 4.1.29
Apache Tomcat 4.1.28
Apache Tomcat 4.1.27
Apache Tomcat 4.1.24
+ Gentoo Linux 1.4 _rc3
 + Gentoo Linux 1.4 _rc2
 + Gentoo Linux 1.4 _rc1
 + Gentoo Linux 1.2
Apache Tomcat 4.1.12
Apache Tomcat 4.1.10
Apache Tomcat 4.1
- BSDI BSD/OS 4.0
- Caldera OpenLinux 2.4
- Debian Linux 2.3
- Debian Linux 2.2
- Debian Linux 2.1
- Digital UNIX 4.0
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 4.5
- Mandriva Linux Mandrake 7.1
- Mandriva Linux Mandrake 7.0
- NetBSD NetBSD 1.4.2 x86
 - NetBSD NetBSD 1.4.1 x86
 - Redhat Linux 6.2 i386
 - Redhat Linux 6.1 i386
 - SGI IRIX 6.5
- SGI IRIX 6.4
- SGI IRIX 3.3
- Sun Solaris 8_sparc
 - Sun Solaris 7.0
 Apache Tomcat 4.0.7
Apache Tomcat 4.0.6
+ Gentoo Linux 1.4 _rc3
 + Gentoo Linux 1.4 _rc2
 + Gentoo Linux 1.4 _rc1
 + Gentoo Linux 1.2
Apache Tomcat 4.0.5
+ Redhat Stronghold 4.0
Apache Tomcat 4.0.4
Apache Tomcat 4.0.3
+ Debian Linux 3.0 sparc
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 alpha
 Apache Tomcat 4.0.2
Apache Tomcat 4.0.1
- BSDI BSD/OS 4.0
- Caldera OpenLinux 2.4
- Debian Linux 2.2
- Debian Linux 2.1
- Digital UNIX 4.0
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 4.0
- Mandriva Linux Mandrake 7.1
- Mandriva Linux Mandrake 7.0
- NetBSD NetBSD 1.4.2 x86
 - NetBSD NetBSD 1.4.1 x86
 - Redhat Linux 6.2 i386
 - Redhat Linux 6.1 i386
 - SGI IRIX 6.5
- SGI IRIX 6.4
- SGI IRIX 3.3
- Sun Solaris 8_sparc
 - Sun Solaris 7.0
 Apache Tomcat 3.3.2
Apache Tomcat 3.3.1
Apache Tomcat 3.3
- BSDI BSD/OS 4.0
- Caldera OpenLinux 2.4
- Debian Linux 2.2
- Debian Linux 2.1
- Digital UNIX 4.0
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 4.0
- Mandriva Linux Mandrake 7.1
- Mandriva Linux Mandrake 7.0
- NetBSD NetBSD 1.4.2 x86
 - NetBSD NetBSD 1.4.1 x86
 - Redhat Linux 6.2 i386
 - Redhat Linux 6.1 i386
 - SGI IRIX 6.5
- SGI IRIX 6.4
- Sun Solaris 8_sparc
 - Sun Solaris 7.0
 Apache Tomcat 3.2.4
Apache Tomcat 3.2.3
Apache Tomcat 3.2.1
- BSDI BSD/OS 4.0
- Caldera OpenLinux 2.4
- Debian Linux 2.2
- Debian Linux 2.1
- Digital UNIX 4.0
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 4.0
- HP Secure OS software for Linux 1.0
- Mandriva Linux Mandrake 7.1
- Mandriva Linux Mandrake 7.0
- NetBSD NetBSD 1.4.2 x86
 - NetBSD NetBSD 1.4.1 x86
 - Redhat Linux 6.2 i386
 - Redhat Linux 6.1 i386
 - SGI IRIX 6.5
- SGI IRIX 6.4
- Sun Solaris 8_sparc
 - Sun Solaris 7.0
 Apache Tomcat 3.2
- BSDI BSD/OS 4.0
- Caldera OpenLinux 2.4
- Debian Linux 2.2
- Debian Linux 2.1
- Digital UNIX 4.0
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 4.0
- Mandriva Linux Mandrake 7.1
- Mandriva Linux Mandrake 7.0
- NetBSD NetBSD 1.4.2 x86
 - NetBSD NetBSD 1.4.1 x86
 - Redhat Linux 6.2 i386
 - Redhat Linux 6.1 i386
 - SGI IRIX 6.5
- SGI IRIX 6.4
- Sun Solaris 8_sparc
 - Sun Solaris 7.0
 Apache Tomcat 3.1.1
Apache Tomcat 3.1
- BSDI BSD/OS 4.0
- Caldera OpenLinux 2.4
- Debian Linux 2.2
- Debian Linux 2.1
- Digital UNIX 4.0
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 4.0
- Mandriva Linux Mandrake 7.1
- Mandriva Linux Mandrake 7.0
- NetBSD NetBSD 1.4.2 x86
 - NetBSD NetBSD 1.4.1 x86
 - Redhat Linux 6.2 i386
 - Redhat Linux 6.1 i386
 - SGI IRIX 6.5
- SGI IRIX 6.4
- Sun Solaris 8_sparc
 - Sun Solaris 7.0
 Apache Tomcat 3.0
- BSDI BSD/OS 4.0
- Caldera OpenLinux 2.4
- Debian Linux 2.2
- Debian Linux 2.1
- Digital UNIX 4.0
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 4.0
- Mandriva Linux Mandrake 7.1
- Mandriva Linux Mandrake 7.0
- NetBSD NetBSD 1.4.2 x86
 - NetBSD NetBSD 1.4 x86
 - Redhat Linux 6.2 i386
 - Redhat Linux 6.1 i386
 - SGI IRIX 6.5
- SGI IRIX 6.4
- Sun Solaris 8_sparc
 - Sun Solaris 7.0
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus