← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2011-1184

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
retired/CVE-2011-1184
1
 
PublicDateAtUSN: 2011-09-26
2
 
Candidate: CVE-2011-1184
3
 
PublicDate: 2012-01-14
4
 
References: 
5
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1184
6
 
 http://tomcat.apache.org/security-6.html
7
 
 https://usn.ubuntu.com/usn/usn-1252-1
8
 
Description:
9
 
 The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x
10
 
 before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the
11
 
 expected countermeasures against replay attacks, which makes it easier for
12
 
 remote attackers to bypass intended access restrictions by sniffing the
13
 
 network for valid requests, related to lack of checking of nonce (aka
14
 
 server nonce) and nc (aka nonce-count or client nonce count) values.
15
 
Ubuntu-Description: 
16
 
Notes: 
17
 
Bugs: 
18
 
Priority: medium
19
 
Discovered-by:
20
 
Assigned-to: mdeslaur
21
 
 
22
 
Patches_tomcat5.5:
23
 
upstream_tomcat5.5: released (5.5.34)
24
 
hardy_tomcat5.5: ignored (reached end-of-life)
25
 
lucid_tomcat5.5: DNE
26
 
maverick_tomcat5.5: DNE
27
 
natty_tomcat5.5: DNE
28
 
oneiric_tomcat5.5: DNE
29
 
devel_tomcat5.5: DNE
30
 
 
31
 
Patches_tomcat6:
32
 
 upstream: http://svn.apache.org/viewvc?view=revision&revision=1158180
33
 
upstream_tomcat6: released (6.0.33)
34
 
hardy_tomcat6: DNE
35
 
lucid_tomcat6: released (6.0.24-2ubuntu1.9)
36
 
maverick_tomcat6: released (6.0.28-2ubuntu1.5)
37
 
natty_tomcat6: released (6.0.28-10ubuntu2.2)
38
 
oneiric_tomcat6: released (6.0.32-5ubuntu1.1)
39
 
devel_tomcat6: released (6.0.32-6ubuntu1)
40
 
 
41
 
Patches_tomcat7:
42
 
upstream_tomcat7: released (7.0.12)
43
 
hardy_tomcat7: DNE
44
 
lucid_tomcat7: DNE
45
 
maverick_tomcat7: DNE
46
 
natty_tomcat7: DNE
47
 
oneiric_tomcat7: not-affected (7.0.21-1)
48
 
devel_tomcat7: not-affected (7.0.21-1)