Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2013-4286 | First vendor Publication | 2014-02-26 |
| Vendor | Cve | Last vendor Modification | 2023-11-07 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5.8 | Attack Range | Network |
| Cvss Impact Score | 4.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4286 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-20 | Improper Input Validation |
OVAL Definitions
CPE : Common Platform Enumeration
Information Assurance Vulnerability Management (IAVM)
| Date | Description |
|---|---|
| 2015-06-25 | IAVM : 2015-B-0083 - Multiple Vulnerabilities in IBM Storwize V7000 Unified Severity : Category I - VMSKEY : V0060983 |
| 2014-12-11 | IAVM : 2014-B-0162 - VMware vCenter Server 5.1 Certificate Validation Vulnerability Severity : Category I - VMSKEY : V0057685 |
| 2014-12-11 | IAVM : 2014-B-0159 - VMware vCenter Server Appliance 5.1 Cross-site Scripting Vulnerability Severity : Category II - VMSKEY : V0057687 |
| 2014-12-11 | IAVM : 2014-A-0191 - VMware vCenter Server 5.0 Certificate Validation Vulnerability Severity : Category I - VMSKEY : V0057699 |
| 2014-12-11 | IAVM : 2014-B-0161 - Multiple Vulnerabilities in VMware ESXi 5.1 Severity : Category I - VMSKEY : V0057717 |
| 2014-02-27 | IAVM : 2014-B-0019 - Multiple Vulnerabilities in Apache Tomcat Severity : Category I - VMSKEY : V0044527 |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2016-03-28 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-3530.nasl - Type : ACT_GATHER_INFO |
| 2015-12-30 | Name : The remote VMware ESXi host is missing a security-related patch. File : vmware_VMSA-2014-0012_remote.nasl - Type : ACT_GATHER_INFO |
| 2015-06-26 | Name : The remote IBM Storwize device is affected by multiple vulnerabilities. File : ibm_storwize_1_5_0_2.nasl - Type : ACT_GATHER_INFO |
| 2015-03-19 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-052.nasl - Type : ACT_GATHER_INFO |
| 2015-01-19 | Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_tomcat_20140522.nasl - Type : ACT_GATHER_INFO |
| 2014-12-15 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201412-29.nasl - Type : ACT_GATHER_INFO |
| 2014-12-12 | Name : The remote host has a virtualization management application installed that is... File : vmware_vcenter_vmsa-2014-0012.nasl - Type : ACT_GATHER_INFO |
| 2014-12-12 | Name : The remote host has an update manager installed that is affected by multiple ... File : vmware_vcenter_update_mgr_vmsa-2014-0012.nasl - Type : ACT_GATHER_INFO |
| 2014-12-12 | Name : The remote host has a virtualization appliance installed that is affected by ... File : vmware_vcenter_server_appliance_vmsa-2014-0012.nasl - Type : ACT_GATHER_INFO |
| 2014-12-12 | Name : The remote VMware ESXi 5.1 host is affected by multiple vulnerabilities. File : vmware_esxi_5_1_build_2323236_remote.nasl - Type : ACT_GATHER_INFO |
| 2014-12-06 | Name : The remote VMware ESXi host is missing a security-related patch. File : vmware_VMSA-2014-0012.nasl - Type : ACT_GATHER_INFO |
| 2014-11-26 | Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2014-0012.nasl - Type : ACT_GATHER_INFO |
| 2014-10-12 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2014-344.nasl - Type : ACT_GATHER_INFO |
| 2014-09-29 | Name : The remote Fedora host is missing a security update. File : fedora_2014-11048.nasl - Type : ACT_GATHER_INFO |
| 2014-07-30 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-0686.nasl - Type : ACT_GATHER_INFO |
| 2014-07-24 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2014-0686.nasl - Type : ACT_GATHER_INFO |
| 2014-07-17 | Name : The remote host has a version of Oracle Secure Global Desktop that is affecte... File : oracle_secure_global_desktop_jul_2014_cpu.nasl - Type : ACT_GATHER_INFO |
| 2014-06-26 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-0526.nasl - Type : ACT_GATHER_INFO |
| 2014-06-26 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-0525.nasl - Type : ACT_GATHER_INFO |
| 2014-04-24 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20140423_tomcat6_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
| 2014-04-24 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-0429.nasl - Type : ACT_GATHER_INFO |
| 2014-04-24 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2014-0429.nasl - Type : ACT_GATHER_INFO |
| 2014-04-24 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2014-0429.nasl - Type : ACT_GATHER_INFO |
| 2014-04-09 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2897.nasl - Type : ACT_GATHER_INFO |
| 2014-04-01 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-0344.nasl - Type : ACT_GATHER_INFO |
| 2014-04-01 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-0343.nasl - Type : ACT_GATHER_INFO |
| 2014-03-07 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2130-1.nasl - Type : ACT_GATHER_INFO |
| 2014-02-25 | Name : The remote Apache Tomcat server is affected by multiple vulnerabilities. File : tomcat_6_0_39.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2023-11-07 21:45:41 |
|
| 2021-05-04 12:27:12 |
|
| 2021-04-22 01:32:55 |
|
| 2020-05-24 01:12:01 |
|
| 2020-05-23 00:37:57 |
|
| 2019-04-15 21:18:58 |
|
| 2019-04-15 17:18:44 |
|
| 2019-03-25 17:18:58 |
|
| 2019-03-21 21:19:10 |
|
| 2018-10-10 00:19:45 |
|
| 2017-12-16 09:21:39 |
|
| 2017-11-15 09:23:50 |
|
| 2016-12-08 09:23:28 |
|
| 2016-11-29 00:24:49 |
|
| 2016-10-26 09:22:41 |
|
| 2016-10-15 12:02:55 |
|
| 2016-08-23 09:24:48 |
|
| 2016-06-17 09:27:00 |
|
| 2016-04-26 09:25:13 |
|
| 2016-03-29 13:21:00 |
|
| 2015-10-18 17:22:20 |
|
| 2015-06-27 13:28:45 |
|
| 2015-04-24 00:26:21 |
|
| 2015-04-22 00:25:36 |
|
| 2015-04-21 09:24:27 |
|
| 2015-04-17 09:26:48 |
|
| 2015-04-15 09:27:27 |
|
| 2015-03-21 00:25:14 |
|
| 2015-03-20 13:28:43 |
|
| 2015-03-20 00:25:07 |
|
| 2015-03-18 09:26:08 |
|
| 2015-01-22 17:22:42 |
|
| 2015-01-21 13:26:20 |
|
| 2014-12-16 17:23:38 |
|
| 2014-12-16 13:25:02 |
|
| 2014-12-12 09:22:43 |
|
| 2014-12-03 09:26:38 |
|
| 2014-10-12 13:27:03 |
|
| 2014-09-30 13:27:26 |
|
| 2014-07-31 13:24:44 |
|
| 2014-07-25 13:21:36 |
|
| 2014-07-18 13:24:20 |
|
| 2014-07-18 09:21:54 |
|
| 2014-07-17 09:21:38 |
|
| 2014-06-27 13:26:13 |
|
| 2014-06-18 09:23:36 |
|
| 2014-04-25 13:24:48 |
|
| 2014-04-12 13:23:18 |
|
| 2014-04-10 13:23:11 |
|
| 2014-04-05 13:22:20 |
|
| 2014-04-02 13:22:33 |
|
| 2014-03-08 13:21:06 |
|
| 2014-02-28 17:19:12 |
|
| 2014-02-26 21:21:36 |
|
