CVE-2005-3164
Summary
| CVE | CVE-2005-3164 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-10-06 10:02:00 UTC |
| Updated | 2023-11-07 01:57:00 UTC |
| Description | The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which can lead to an information leak when "unsuitable request body data" is used for a different request, possibly related to Java Servlet pages. |
Risk And Classification
Problem Types: CWE-200
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Apache | Tomcat | 4.0.1 | All | All | All |
| Application | Apache | Tomcat | 4.0.2 | All | All | All |
| Application | Apache | Tomcat | 4.0.3 | All | All | All |
| Application | Apache | Tomcat | 4.0.4 | All | All | All |
| Application | Apache | Tomcat | 4.0.5 | All | All | All |
| Application | Apache | Tomcat | 4.0.6 | All | All | All |
| Application | Apache | Tomcat | 4.1.0 | All | All | All |
| Application | Apache | Tomcat | 4.1.1 | All | All | All |
| Application | Apache | Tomcat | 4.1.10 | All | All | All |
| Application | Apache | Tomcat | 4.1.12 | All | All | All |
| Application | Apache | Tomcat | 4.1.15 | All | All | All |
| Application | Apache | Tomcat | 4.1.2 | All | All | All |
| Application | Apache | Tomcat | 4.1.24 | All | All | All |
| Application | Apache | Tomcat | 4.1.28 | All | All | All |
| Application | Apache | Tomcat | 4.1.3 | All | All | All |
| Application | Apache | Tomcat | 4.1.3 | beta | All | All |
| Application | Apache | Tomcat | 4.1.31 | All | All | All |
| Application | Apache | Tomcat | 4.1.36 | All | All | All |
| Application | Apache | Tomcat | 4.0.1 | All | All | All |
| Application | Apache | Tomcat | 4.0.2 | All | All | All |
| Application | Apache | Tomcat | 4.0.3 | All | All | All |
| Application | Apache | Tomcat | 4.0.4 | All | All | All |
| Application | Apache | Tomcat | 4.0.5 | All | All | All |
| Application | Apache | Tomcat | 4.0.6 | All | All | All |
| Application | Apache | Tomcat | 4.1.0 | All | All | All |
| Application | Apache | Tomcat | 4.1.1 | All | All | All |
| Application | Apache | Tomcat | 4.1.10 | All | All | All |
| Application | Apache | Tomcat | 4.1.12 | All | All | All |
| Application | Apache | Tomcat | 4.1.15 | All | All | All |
| Application | Apache | Tomcat | 4.1.2 | All | All | All |
| Application | Apache | Tomcat | 4.1.24 | All | All | All |
| Application | Apache | Tomcat | 4.1.28 | All | All | All |
| Application | Apache | Tomcat | 4.1.3 | All | All | All |
| Application | Apache | Tomcat | 4.1.3 | beta | All | All |
| Application | Apache | Tomcat | 4.1.31 | All | All | All |
| Application | Apache | Tomcat | 4.1.36 | All | All | All |
| Application | Apache | Tomcat | All | All | All | All |
| Application | Apache | Tomcat | All | All | All | All |
| Application | Apache Software Foundation | Tomcat | 4.1 | All | All | All |
| Application | Apache Software Foundation | Tomcat | 4.1.32 | All | All | All |
| Application | Apache Software Foundation | Tomcat | 4.1.34 | All | All | All |
| Application | Apache Software Foundation | Tomcat | 4.1 | All | All | All |
| Application | Apache Software Foundation | Tomcat | 4.1.32 | All | All | All |
| Application | Apache Software Foundation | Tomcat | 4.1.34 | All | All | All |
| Application | Hitachi | Cosminexus Application Server | 05_00_05_05_e | All | All | All |
| Application | Hitachi | Cosminexus Application Server | 05_00_05_05_f | All | All | All |
| Application | Hitachi | Cosminexus Application Server | 05_00_05_05_h | All | All | All |
| Application | Hitachi | Cosminexus Application Server | 05_00_05_05_k | All | All | All |
| Application | Hitachi | Cosminexus Application Server | 05_00_05_05_e | All | All | All |
| Application | Hitachi | Cosminexus Application Server | 05_00_05_05_f | All | All | All |
| Application | Hitachi | Cosminexus Application Server | 05_00_05_05_h | All | All | All |
| Application | Hitachi | Cosminexus Application Server | 05_00_05_05_k | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail - OVH | VUPEN | www.vupen.com | Vendor Advisory |
| Hitachi Cosminexus Remote Information Disclosure Vulnerability | BID | www.securityfocus.com | |
| About the security content of Security Update 2008-004 and Mac OS X 10.5.4 | CONFIRM | support.apple.com | |
| Pony Mail! | lists.apache.org | ||
| APPLE-SA-2008-06-30 Security Update 2008-004 and Mac OS X v10.5.4 | APPLE | lists.apple.com | |
| 239312 | SUNALERT | sunsolve.sun.com | |
| Pony Mail! | lists.apache.org | ||
| HITACHI : HS05-019-01 : Vulnerability Information | CONFIRM | www.hitachi-support.com | |
| Pony Mail! | MLIST | lists.apache.org | |
| Hitachi Cosminexus Request Body Disclosure of Personal Information - Secunia Advisories - Vulnerability Intelligence - Secunia.com | SECUNIA | secunia.com | Vendor Advisory |
| Apple Mac OS X Security Update Fixes Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | SECUNIA | secunia.com | Vendor Advisory |
| Pony Mail! | MLIST | lists.apache.org | |
| Pony Mail! | MLIST | lists.apache.org | |
| Apache Tomcat® - Apache Tomcat 4.x vulnerabilities | CONFIRM | tomcat.apache.org | |
| JVN#79314822: Tomcat におけるリクエスト処理に関する脆弱性 | JVN | jvn.jp | |
| Sun Solaris 9 Tomcat Multiple Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Sun Solaris 10 Tomcat Multiple Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Pony Mail! | lists.apache.org | ||
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | Vendor Advisory |
| JVN:JVN#79314822 | MITRE | jvn.jp | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 995579 Java (Maven) Security Update for org.apache.tomcat:tomcat (GHSA-qhqv-q4xg-f6g7)