National Cyber Awareness System

Vulnerability Summary for CVE-2007-5342

Overview

The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 27006

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/27006

External Source: VUPEN

Name: ADV-2009-3316

Hyperlink:http://www.vupen.com/english/advisories/2009/3316

External Source: VUPEN

Name: ADV-2008-2823

Hyperlink:http://www.vupen.com/english/advisories/2008/2823

External Source: VUPEN

Name: ADV-2008-2780

Hyperlink:http://www.vupen.com/english/advisories/2008/2780

External Source: VUPEN

Name: ADV-2008-1856

Hyperlink:http://www.vupen.com/english/advisories/2008/1856/references

External Source: VUPEN

Name: ADV-2008-0013

Hyperlink:http://www.vupen.com/english/advisories/2008/0013

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2009-0016.html

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2008-0010.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2008-0010.html

External Source: BID

Name: 31681

Hyperlink:http://www.securityfocus.com/bid/31681

External Source: BUGTRAQ

Name: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/507985/100/0/threaded

External Source: BUGTRAQ

Name: 20071223 [CVE-2007-5342] Apache Tomcat's default security policy is too open

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/485481/100/0/threaded

External Source: REDHAT

Name: RHSA-2008:0862

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0862.html

External Source: REDHAT

Name: RHSA-2008:0834

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0834.html

External Source: REDHAT

Name: RHSA-2008:0833

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0833.html

External Source: REDHAT

Name: RHSA-2008:0832

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0832.html

External Source: REDHAT

Name: RHSA-2008:0831

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0831.html

External Source: MANDRIVA

Name: MDVSA-2008:188

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:188

External Source: CONFIRM

Name: http://tomcat.apache.org/security-6.html

Hyperlink:http://tomcat.apache.org/security-6.html

External Source: CONFIRM

Name: http://tomcat.apache.org/security-5.html

Hyperlink:http://tomcat.apache.org/security-5.html

External Source: MISC

Name: http://svn.apache.org/viewvc?view=rev&revision=606594

Hyperlink:http://svn.apache.org/viewvc?view=rev&revision=606594

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3216

Hyperlink:http://support.apple.com/kb/HT3216

External Source: SECUNIA

Name: 37460

Hyperlink:http://secunia.com/advisories/37460

External Source: SECUNIA

Name: 32266

Hyperlink:http://secunia.com/advisories/32266

External Source: SECUNIA

Name: 32222

Hyperlink:http://secunia.com/advisories/32222

External Source: SECUNIA

Name: 32120

Hyperlink:http://secunia.com/advisories/32120

External Source: SECUNIA

Name: 30676

Hyperlink:http://secunia.com/advisories/30676

External Source: OVAL

Name: oval:org.mitre.oval:def:10417

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10417

External Source: OSVDB

Name: 39833

Hyperlink:http://osvdb.org/39833

External Source: SUSE

Name: SUSE-SR:2009:004

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

External Source: APPLE

Name: APPLE-SA-2008-10-09

Hyperlink:http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

External Source: FEDORA

Name: FEDORA-2008-1603

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html

External Source: FEDORA

Name: FEDORA-2008-1467

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html

External Source: XF

Name: apache-juli-logging-weak-security(39201)

Hyperlink:http://xforce.iss.net/xforce/xfdb/39201

External Source: REDHAT

Name: RHSA-2008:0195

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0195.html

External Source: REDHAT

Name: RHSA-2008:0042

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0042.html

External Source: DEBIAN

Name: DSA-1447

Hyperlink:http://www.debian.org/security/2008/dsa-1447

External Source: SREASON

Name: 3485

Hyperlink:http://securityreason.com/securityalert/3485

External Source: GENTOO

Name: GLSA-200804-10

Hyperlink:http://security.gentoo.org/glsa/glsa-200804-10.xml

External Source: SECUNIA

Name: 29711

Hyperlink:http://secunia.com/advisories/29711

External Source: SECUNIA

Name: 29313

Hyperlink:http://secunia.com/advisories/29313

External Source: SECUNIA

Name: 28915

Hyperlink:http://secunia.com/advisories/28915

External Source: SECUNIA

Name: 28317

Hyperlink:http://secunia.com/advisories/28317

External Source: SECUNIA

Name: 28274

Hyperlink:http://secunia.com/advisories/28274

References to Check Content

Identifier:oval:org.mitre.oval:def:10417

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10417