CVE-2005-2090 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-2090
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-2090

Description: Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."

CVE Status: Candidate

References: SUSE http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 ST 1014365 SAID Secunia Advisory: SA26235 Secunia Advisory: SA26660 Secunia Advisory: SA27037 Secunia Advisory: SA28365 Secunia Advisory: SA29242 Secunia Advisory: SA30908 Secunia Advisory: SA30899 Secunia Advisory: SA33668 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0261.html http://www.redhat.com/support/errata/RHSA-2007-0327.html http://www.redhat.com/support/errata/RHSA-2007-0360.html MLIST http://lists.vmware.com/pipermail/security-announce/2008/000003.html MISC http://www.securiteam.com/securityreviews/5GP0220G0U.html http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 CONFIRM http://tomcat.apache.org/security-4.html http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html http://docs.info.apple.com/article.html?artnum=306172 http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-5.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/500396/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/500412/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/485938/100/0/threaded http://seclists.org/lists/bugtraq/2005/Jun/0025.html BID 25159 13873 APPLE http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html

Return to the previous page.