Apache Tomcat CVE-2012-5568 Denial of Service Vulnerability
BID:56686
Info
Apache Tomcat CVE-2012-5568 Denial of Service Vulnerability
| Bugtraq ID: | 56686 |
| Class: | Design Error |
| CVE: |
CVE-2012-5568 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 26 2012 12:00AM |
| Updated: | May 23 2017 04:26PM |
| Credit: | David Jorm |
| Vulnerable: |
Juniper Network and Security Manager (NSM) 2012.2 Juniper Network and Security Manager (NSM) 2012.1 Juniper Network and Security Manager (NSM) 2011.4 Juniper Network and Security Manager (NSM) 2010.3 Apache Tomcat 7.0.30 Apache Tomcat 7.0.29 Apache Tomcat 7.0.28 Apache Tomcat 7.0.27 Apache Tomcat 7.0.26 Apache Tomcat 7.0.25 Apache Tomcat 7.0.24 Apache Tomcat 7.0.23 Apache Tomcat 7.0.16 Apache Tomcat 7.0.15 Apache Tomcat 7.0.14 Apache Tomcat 7.0.13 Apache Tomcat 7.0.12 Apache Tomcat 7.0.9 Apache Tomcat 7.0.8 Apache Tomcat 7.0.7 Apache Tomcat 7.0.6 Apache Tomcat 7.0.4 Apache Tomcat 7.0.3 Apache Tomcat 7.0.2 Apache Tomcat 7.0.1 Apache Tomcat 7.0 beta Apache Tomcat 7.0 Apache Tomcat 6.0.36 Apache Tomcat 6.0.35 Apache Tomcat 6.0.29 Apache Tomcat 6.0.28 Apache Tomcat 6.0.27 Apache Tomcat 6.0.26 Apache Tomcat 6.0.25 Apache Tomcat 6.0.24 Apache Tomcat 6.0.20 Apache Tomcat 6.0.18 Apache Tomcat 6.0.17 Apache Tomcat 6.0.16 Apache Tomcat 6.0.15 Apache Tomcat 6.0.14 Apache Tomcat 6.0.13 Apache Tomcat 6.0.12 Apache Tomcat 6.0.11 Apache Tomcat 6.0.10 Apache Tomcat 6.0.9 Apache Tomcat 6.0.8 Apache Tomcat 6.0.7 Apache Tomcat 6.0.6 Apache Tomcat 6.0.5 Apache Tomcat 6.0.4 Apache Tomcat 6.0.3 Apache Tomcat 6.0.2 Apache Tomcat 6.0.1 Apache Tomcat 6.0 Apache Tomcat 5.5.36 Apache Tomcat 5.5.35 Apache Tomcat 5.5.34 Apache Tomcat 5.5.32 Apache Tomcat 5.5.30 Apache Tomcat 5.5.29 Apache Tomcat 5.5.28 Apache Tomcat 5.5.27 Apache Tomcat 5.5.26 Apache Tomcat 5.5.25 Apache Tomcat 5.5.24 Apache Tomcat 5.5.23 Apache Tomcat 5.5.22 Apache Tomcat 5.5.21 Apache Tomcat 5.5.20 Apache Tomcat 5.5.19 Apache Tomcat 5.5.18 Apache Tomcat 5.5.17 Apache Tomcat 5.5.16 Apache Tomcat 5.5.15 Apache Tomcat 5.5.14 Apache Tomcat 5.5.13 Apache Tomcat 5.5.12 Apache Tomcat 5.5.11 Apache Tomcat 5.5.10 Apache Tomcat 5.5.9 Apache Tomcat 5.5.8 Apache Tomcat 5.5.7 Apache Tomcat 5.5.6 Apache Tomcat 5.5.5 Apache Tomcat 5.5.4 Apache Tomcat 5.5.3 Apache Tomcat 5.5.2 Apache Tomcat 5.5.1 Apache Tomcat 5.5 Apache Tomcat 5.4 Apache Tomcat 5.3 Apache Tomcat 5.2 Apache Tomcat 5.1 Apache Tomcat 5.0.31 Apache Tomcat 5.0.30 Apache Tomcat 5.0.28 Apache Tomcat 5.0.19 Apache Tomcat 5.0.16 Apache Tomcat 5.0.15 Apache Tomcat 5.0.14 Apache Tomcat 5.0.13 Apache Tomcat 5.0.12 Apache Tomcat 5.0.11 Apache Tomcat 5.0.10 Apache Tomcat 5.0.9 Apache Tomcat 5.0.8 Apache Tomcat 5.0.7 Apache Tomcat 5.0.6 Apache Tomcat 5.0.5 Apache Tomcat 5.0.4 Apache Tomcat 5.0.3 Apache Tomcat 5.0.2 Apache Tomcat 5.0.1 Apache Tomcat 4.1.40 Apache Tomcat 4.1.39 Apache Tomcat 4.1.38 Apache Tomcat 4.1.37 Apache Tomcat 4.1.36 Apache Tomcat 4.1.35 Apache Tomcat 4.1.34 Apache Tomcat 4.1.32 Apache Tomcat 4.1.31 Apache Tomcat 4.1.30 Apache Tomcat 4.1.29 Apache Tomcat 4.1.28 Apache Tomcat 4.1.27 Apache Tomcat 4.1.24 Apache Tomcat 4.1.12 Apache Tomcat 4.1.10 Apache Tomcat 4.1.9 beta Apache Tomcat 4.1.3 beta Apache Tomcat 4.1.3 Apache Tomcat 4.1 Apache Tomcat 4.0.7 Apache Tomcat 4.0.6 Apache Tomcat 4.0.5 Apache Tomcat 4.0.4 Apache Tomcat 4.0.3 Apache Tomcat 4.0.2 Apache Tomcat 4.0.1 Apache Tomcat 3.3.2 Apache Tomcat 3.3.1 Apache Tomcat 3.3 Apache Tomcat 3.2.4 Apache Tomcat 3.2.3 Apache Tomcat 3.2.2 beta2 Apache Tomcat 3.2.1 Apache Tomcat 3.2 Apache Tomcat 3.1.1 Apache Tomcat 3.1 Apache Tomcat 3.0 Apache Tomcat 7.0.5 Apache Tomcat 7.0.22 Apache Tomcat 7.0.21 Apache Tomcat 7.0.20 Apache Tomcat 7.0.19 Apache Tomcat 7.0.18 Apache Tomcat 7.0.17 Apache Tomcat 7.0.11 Apache Tomcat 7.0.10 Apache Tomcat 7.0 Apache Tomcat 6.0.33 Apache Tomcat 6.0.32 Apache Tomcat 6.0.31 Apache Tomcat 6.0.30 Apache Tomcat 5.5.33 Apache Tomcat 5.0 Apache Tomcat 4.0.0 RC2 |
| Not Vulnerable: | |
Discussion
Apache Tomcat CVE-2012-5568 Denial of Service Vulnerability
Apache Tomcat is prone to a denial-of-service vulnerability.
Attackers may leverage this issue to cause denial-of-service conditions.
Apache Tomcat is prone to a denial-of-service vulnerability.
Attackers may leverage this issue to cause denial-of-service conditions.
Exploit / POC
Apache Tomcat CVE-2012-5568 Denial of Service Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Apache Tomcat CVE-2012-5568 Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Apache Tomcat CVE-2012-5568 Denial of Service Vulnerability
References:
References:
- 2013-11 Security Bulletin: Network and Security Manager: Apache Tomcat security (Juniper Networks)
- Apache Tomcat Homepage (Apache)
- Bug 880011 - CVE-2012-5568 tomcat: Slowloris denial of service (Red Hat Bugzilla )
- Slowloris vs tomcat (captain holly java blog)