Patchfirst
Patchfirst
CVE-2008-1232 Public exploit EPSS 75.9%

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0…

Summary

The flaw is a cross-site scripting (XSS) vulnerability in Apache Tomcat, affecting versions 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, where the message argument passed to the HttpServletResponse.sendError method is not properly sanitised. A remote attacker who supplies a crafted string as that message can inject arbitrary web script or HTML into the response.

Official description · CVE.org

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.

Breakdown
24.9 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Public exploit code (Exploit-DB) was available 3 days before disclosure.

  1. Public exploit codeExploit-DB3 days before
  2. Disclosedday 0

7 fixes in tomcat over 14 months. The latest fix listed for tomcat is 6.0.18.

Fixes in tomcatMaven package, by fixed version. Earlier and later fixes in the same package, not necessarily the same bug.

  1. 6.0.14CVE-2007-245014 Jun 2007
  2. 6.0.15CVE-2007-533312 Feb 2008
  3. 6.0.16CVE-2008-000212 Feb 2008
  4. 6.0.17CVE-2008-12324 Aug 2008
  5. 6.0.18CVE-2008-19474 Jun 2008
  6. 6.0.18CVE-2008-23704 Aug 2008
  7. 6.0.18CVE-2008-293813 Aug 2008Latest listed

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

Am I affected? What do I upgrade to?

From GitHub Security Advisories and OSV

1 package in 1 ecosystem. Main package: org.apache.tomcat:tomcat.

Mavenorg.apache.tomcat:tomcatGHSA-q74x-qqhr-f8rx

Upgrade to 6.0.35 or later

Fixes this CVE and 8 other known vulnerabilities in this package (CVE-2007-0450, CVE-2007-2449, +6).

Set the version to 6.0.35 or later in your pom.xml or build.gradle.

First fixed in 6.0.17 for CVE-2008-1232.

Affected versions, by release line

If you runUpgrade to
6.0.0 up to 6.0.176.0.35first fix for this CVE: 6.0.17
5.5.0 up to 5.5.275.5.35first fix for this CVE: 5.5.27
4.1.0 up to 4.1.384.1.40first fix for this CVE: 4.1.38

“Up to” means the second version is the fix and is not affected.

Check your lockfile against all CVEs

What security researchers reported

Not named in any threat report yet

References

64 links, grouped by NVD tag

vdb-entry 14

securitytracker.com/id?1020622oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5985vupen.com/english/advisories/2009/1609vupen.com/english/advisories/2009/2194vupen.com/english/advisories/2008/2823securityfocus.com/bid/31681oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11181securityfocus.com/bid/30496
Show 6 moreShow fewervupen.com/english/advisories/2009/0320vupen.com/english/advisories/2008/2305vupen.com/english/advisories/2008/2780vupen.com/english/advisories/2009/0503vupen.com/english/advisories/2009/3316exchange.xforce.ibmcloud.com/vulnerabilities/44155

x_refsource_CONFIRM 10

tomcat.apache.org/security-4.htmlcommunity.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-02-ca-service-desk-tomcat-cross-site-scripting-vulnerability.aspxvmware.com/security/advisories/VMSA-2009-0002.htmlvmware.com/security/advisories/VMSA-2009-0016.htmlsupport.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214095support.avaya.com/elmodocs2/security/ASA-2008-401.htmtomcat.apache.org/security-6.htmlsupport.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209500tomcat.apache.org/security-5.htmlsupport.apple.com/kb/HT3216

vendor-advisory 12

redhat.com/support/errata/RHSA-2008-0862.htmlredhat.com/archives/fedora-package-announce/2008-September/msg00889.htmllists.opensuse.org/opensuse-security-announce/2008-09/msg00004.htmlmandriva.com/security/advisories?name=MDVSA-2008:188redhat.com/support/errata/RHSA-2008-0864.htmllists.opensuse.org/opensuse-security-announce/2009-02/msg00002.htmlredhat.com/archives/fedora-package-announce/2008-September/msg00712.htmlredhat.com/archives/fedora-package-announce/2008-September/msg00859.html
Show 4 moreShow fewermarc.info/?l=bugtraq&m=123376588623823&w=2marc.info/?l=bugtraq&m=139344343412337&w=2lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlredhat.com/support/errata/RHSA-2008-0648.html

third-party-advisory 17

secunia.com/advisories/34013secunia.com/advisories/37460secunia.com/advisories/31982secunia.com/advisories/32120secunia.com/advisories/33999secunia.com/advisories/31865securityreason.com/securityalert/4098secunia.com/advisories/31639
Show 9 moreShow fewersecunia.com/advisories/36108secunia.com/advisories/31379secunia.com/advisories/57126secunia.com/advisories/32222secunia.com/advisories/31891secunia.com/advisories/33797secunia.com/advisories/35474secunia.com/advisories/31381secunia.com/advisories/32266

mailing-list 11

securityfocus.com/archive/1/507985/100/0/threadedsecurityfocus.com/archive/1/505556/100/0/threadedsecurityfocus.com/archive/1/504351/100/0/threadedsecurityfocus.com/archive/1/495021/100/0/threadedlists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3Elists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3Elists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3Elists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E
Show 3 moreShow fewerlists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3Elists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3Elists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
↑ ↓ chooseEnter openEsc close