CVE-2005-3510

Severity

50%

Complexity

99%

Confidentiality

48%

Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files.

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

Type

Apache Software Foundation Tomcat

First reported 19 years ago

2005-11-06 11:02:00

Last updated 5 years ago

2019-03-25 11:29:00

Affected Software

Apache Software Foundation Tomcat 5.5.0

5.5.0

Apache Software Foundation Tomcat 5.5.1

5.5.1

Apache Software Foundation Tomcat 5.5.2

5.5.2

Apache Software Foundation Tomcat 5.5.3

5.5.3

Apache Software Foundation Tomcat 5.5.4

5.5.4

Apache Software Foundation Tomcat 5.5.5

5.5.5

Apache Software Foundation Tomcat 5.5.6

5.5.6

Apache Software Foundation Tomcat 5.5.7

5.5.7

Apache Software Foundation Tomcat 5.5.8

5.5.8

Apache Software Foundation Tomcat 5.5.9

5.5.9

Apache Software Foundation Tomcat 5.5.10

5.5.10

Apache Software Foundation Tomcat 5.5.11

5.5.11

References

http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx

17416

Vendor Advisory

30899

30908

33668

1015147

Patch, Vendor Advisory

239312

http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540

http://tomcat.apache.org/security-4.html

http://tomcat.apache.org/security-5.html

20439

RHSA-2006:0161

RHSA-2008:0261

20051104 Apache Tomcat 5.5.x remote Denial Of Service

20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities

20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)

15325

ADV-2008-1979

ADV-2009-0233

[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/

[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/

[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.