National Cyber Awareness System

Vulnerability Summary for CVE-2010-3718

Overview

Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: tomcat-servletcontect-sec-bypass(65159)

Hyperlink:http://xforce.iss.net/xforce/xfdb/65159

External Source: SECTRACK

Name: 1025025

Hyperlink:http://www.securitytracker.com/id?1025025

External Source: BID

Name: 46177

Hyperlink:http://www.securityfocus.com/bid/46177

External Source: BUGTRAQ

Name: 20110205 [SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/516211/100/0/threaded

External Source: REDHAT

Name: RHSA-2011:1845

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-1845.html

External Source: REDHAT

Name: RHSA-2011:0897

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0897.html

External Source: REDHAT

Name: RHSA-2011:0896

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0896.html

External Source: REDHAT

Name: RHSA-2011:0791

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0791.html

External Source: MANDRIVA

Name: MDVSA-2011:030

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:030

External Source: DEBIAN

Name: DSA-2160

Hyperlink:http://www.debian.org/security/2011/dsa-2160

External Source: MISC

Name: http://tomcat.apache.org/security-7.html

Type: Advisory

Hyperlink:http://tomcat.apache.org/security-7.html

External Source: MISC

Name: http://tomcat.apache.org/security-6.html

Type: Advisory

Hyperlink:http://tomcat.apache.org/security-6.html

External Source: MISC

Name: http://tomcat.apache.org/security-5.html

Type: Advisory

Hyperlink:http://tomcat.apache.org/security-5.html

External Source: CONFIRM

Name: http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html

Hyperlink:http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html

External Source: CONFIRM

Name: http://support.apple.com/kb/HT5002

Hyperlink:http://support.apple.com/kb/HT5002

External Source: SREASON

Name: 8072

Hyperlink:http://securityreason.com/securityalert/8072

External Source: SECUNIA

Name: 45022

Hyperlink:http://secunia.com/advisories/45022

External Source: SECUNIA

Name: 43192

Type: Advisory

Hyperlink:http://secunia.com/advisories/43192

External Source: OVAL

Name: oval:org.mitre.oval:def:13969

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:13969

External Source: OVAL

Name: oval:org.mitre.oval:def:12517

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12517

External Source: HP

Name: SSRT101146

Hyperlink:http://marc.info/?l=bugtraq&m=136485229118404&w=2

External Source: HP

Name: HPSBUX02860

Hyperlink:http://marc.info/?l=bugtraq&m=136485229118404&w=2

External Source: HP

Name: SSRT100627

Hyperlink:http://marc.info/?l=bugtraq&m=132215163318824&w=2

External Source: HP

Name: HPSBUX02725

Hyperlink:http://marc.info/?l=bugtraq&m=132215163318824&w=2

External Source: APPLE

Name: APPLE-SA-2011-10-12-3

Hyperlink:http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

References to Check Content

Identifier:oval:org.mitre.oval:def:12517

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:12517