vulnwire
6.4med

CVE-2007-5342

JULI logging component in Apache Tomcat does not restrict certain permissions for web applications

Also known as GHSA-w65j-cmqc-37p2

Published 18 y ago · modified 4 mo ago · JSON

CVSS
6.4
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
5.2%
percentile 92%
Public exploits
0
none known

The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.

Exploit prediction (EPSS)

5.16% probability of exploitation in the next 30 days, higher than 92% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.4AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.apache.tomcat:tomcat-juli
>=5.5.9, <=5.5.25
>=6.0.0, <=6.0.15
no fix listed

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls
  • CWE-284 Improper Access Control

References

  • secunia.com /advisories/30676 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2008-0862.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/28915 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2008/2823 · vdb-entry, x_refsource_VUPEN, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10417 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • secunia.com /advisories/37460 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/29313 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/31681 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/32120 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vmware.com /security/advisories/VMSA-2009-0016.html · x_refsource_CONFIRM, x_transferred
  • redhat.com /support/errata/RHSA-2008-0042.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/28274 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2008:188 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/28317 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2008-401.htm · x_refsource_CONFIRM, x_transferred
  • securityreason.com /securityalert/3485 · third-party-advisory, x_refsource_SREASON, x_transferred
  • securityfocus.com /archive/1/485481/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /archive/1/507985/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2009-02/msg00002.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • tomcat.apache.org /security-6.html · x_refsource_CONFIRM, x_transferred
  • redhat.com /support/errata/RHSA-2008-0832.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/57126 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/32222 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2008-0195.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • redhat.com /archives/fedora-package-announce/2008-February/msg00315.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • security.gentoo.org /glsa/glsa-200804-10.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/39201 · vdb-entry, x_refsource_XF, x_transferred
  • svn.apache.org /viewvc?view=rev&revision=606594 · x_refsource_MISC, x_transferred
  • redhat.com /support/errata/RHSA-2008-0833.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • redhat.com /archives/fedora-package-announce/2008-February/msg00460.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • vupen.com /english/advisories/2008/1856/references · vdb-entry, x_refsource_VUPEN, x_transferred
  • vmware.com /security/advisories/VMSA-2008-0010.html · x_refsource_CONFIRM, x_transferred
  • tomcat.apache.org /security-5.html · x_refsource_CONFIRM, x_transferred
  • osvdb.org /39833 · vdb-entry, x_refsource_OSVDB, x_transferred
  • vupen.com /english/advisories/2008/0013 · vdb-entry, x_refsource_VUPEN, x_transferred
  • vupen.com /english/advisories/2008/2780 · vdb-entry, x_refsource_VUPEN, x_transferred
  • redhat.com /support/errata/RHSA-2008-0831.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securityfocus.com /bid/27006 · vdb-entry, x_refsource_BID, x_transferred
  • redhat.com /support/errata/RHSA-2008-0834.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • debian.org /security/2008/dsa-1447 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2007-5342 · advisory
  • github.com /apache/tomcat/tree/main/java/org/apache/juli · package
  • lists.apache.org /thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apac · web
  • lists.apache.org /thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache · web
  • lists.apache.org /thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apac · web
  • lists.apache.org /thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache · web
  • lists.apache.org /thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apa · web
  • lists.apache.org /thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apach · web
  • lists.apache.org /thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apa · web
  • lists.apache.org /thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apach · web
  • lists.apple.com /archives/security-announce/2008/Oct/msg00001.html · web
  • marc.info /?l=bugtraq&m=139344343412337&w=2 · web
  • support.apple.com /kb/HT3216 · web
  • secunia.com /advisories/29711
  • secunia.com /advisories/32266

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.