CVE-2007-1858
Summary
| CVE | CVE-2007-1858 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-05-10 00:19:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts. |
Risk And Classification
Primary CVSS: v2.0 2.6 from [email protected]
AV:N/AC:H/Au:N/C:P/I:N/A:N
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
HighAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:H/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Apache | Tomcat | 4.1.28 | All | All | All |
| Application | Apache | Tomcat | 4.1.31 | All | All | All |
| Application | Apache | Tomcat | 5.0.0 | All | All | All |
| Application | Apache | Tomcat | 5.0.1 | All | All | All |
| Application | Apache | Tomcat | 5.0.10 | All | All | All |
| Application | Apache | Tomcat | 5.0.11 | All | All | All |
| Application | Apache | Tomcat | 5.0.12 | All | All | All |
| Application | Apache | Tomcat | 5.0.13 | All | All | All |
| Application | Apache | Tomcat | 5.0.14 | All | All | All |
| Application | Apache | Tomcat | 5.0.15 | All | All | All |
| Application | Apache | Tomcat | 5.0.16 | All | All | All |
| Application | Apache | Tomcat | 5.0.17 | All | All | All |
| Application | Apache | Tomcat | 5.0.18 | All | All | All |
| Application | Apache | Tomcat | 5.0.19 | All | All | All |
| Application | Apache | Tomcat | 5.0.2 | All | All | All |
| Application | Apache | Tomcat | 5.0.21 | All | All | All |
| Application | Apache | Tomcat | 5.0.22 | All | All | All |
| Application | Apache | Tomcat | 5.0.23 | All | All | All |
| Application | Apache | Tomcat | 5.0.24 | All | All | All |
| Application | Apache | Tomcat | 5.0.25 | All | All | All |
| Application | Apache | Tomcat | 5.0.26 | All | All | All |
| Application | Apache | Tomcat | 5.0.27 | All | All | All |
| Application | Apache | Tomcat | 5.0.28 | All | All | All |
| Application | Apache | Tomcat | 5.0.29 | All | All | All |
| Application | Apache | Tomcat | 5.0.30 | All | All | All |
| Application | Apache | Tomcat | 5.5.0 | All | All | All |
| Application | Apache | Tomcat | 5.5.1 | All | All | All |
| Application | Apache | Tomcat | 5.5.10 | All | All | All |
| Application | Apache | Tomcat | 5.5.11 | All | All | All |
| Application | Apache | Tomcat | 5.5.12 | All | All | All |
| Application | Apache | Tomcat | 5.5.13 | All | All | All |
| Application | Apache | Tomcat | 5.5.14 | All | All | All |
| Application | Apache | Tomcat | 5.5.15 | All | All | All |
| Application | Apache | Tomcat | 5.5.16 | All | All | All |
| Application | Apache | Tomcat | 5.5.17 | All | All | All |
| Application | Apache | Tomcat | 5.5.2 | All | All | All |
| Application | Apache | Tomcat | 5.5.3 | All | All | All |
| Application | Apache | Tomcat | 5.5.4 | All | All | All |
| Application | Apache | Tomcat | 5.5.5 | All | All | All |
| Application | Apache | Tomcat | 5.5.6 | All | All | All |
| Application | Apache | Tomcat | 5.5.7 | All | All | All |
| Application | Apache | Tomcat | 5.5.8 | All | All | All |
| Application | Apache | Tomcat | 5.5.9 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Oracle Critical Patch Update - January 2014 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | |
| SUSE Update for Multiple Packages - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Pony Mail! | af854a3a-2127-422b-91ae-364da2661108 | lists.apache.org | |
| ASA-2007-206 (RHSA-2007-0326) | af854a3a-2127-422b-91ae-364da2661108 | support.avaya.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Apache Tomcat® - Apache Tomcat 4.x vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | tomcat.apache.org | Patch |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| '[security bulletin] HPSBMU02744 SSRT100776 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| [security-announce] SUSE Security Summary Report SUSE-SR:2008:007 | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| BlackBerry Enterprise Server Multiple Vulnerabilities - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| osvdb.org/34882 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| Friday, January 23, 2009 - Posts - CA Security Response Blog - CA Technologies | af854a3a-2127-422b-91ae-364da2661108 | community.ca.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Apache Tomcat - Apache Tomcat 5 vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | tomcat.apache.org | Patch |
| Apache Tomcat SSL Anonymous Cipher Configuration Information Disclosure Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| CA Cohesion Application Configuration Manager Apache Tomcat Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Pony Mail! | af854a3a-2127-422b-91ae-364da2661108 | lists.apache.org | |
| 404 Not Found | af854a3a-2127-422b-91ae-364da2661108 | support.ca.com | |
| RETIRED: Oracle January 2014 Critical Patch Update Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Pony Mail! | af854a3a-2127-422b-91ae-364da2661108 | lists.apache.org | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Pony Mail! | MITRE | lists.apache.org | |
| Pony Mail! | MITRE | lists.apache.org | |
| Pony Mail! | MITRE | lists.apache.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.