CVE-2007-1858 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-1858
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-1858

Description: The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/34212 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html SAID Secunia Advisory: SA29392 OSVDB 34882 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-4.html BID 28482

Return to the previous page.