Back to search
CVE-2007-3382
Published: Aug 14, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
DSA-1453
vendor-advisory
x_refsource_DEBIAN
RHSA-2007:0950
vendor-advisory
x_refsource_REDHAT
http://support.apple.com/kb/HT2163
x_refsource_CONFIRM
20070814 Re: CVE-2007-3382: Handling of cookies containing a ' character
mailing-list
x_refsource_BUGTRAQ
ADV-2008-1981
vdb-entry
x_refsource_VUPEN
FEDORA-2007-3456
vendor-advisory
x_refsource_FEDORA
27267
third-party-advisory
x_refsource_SECUNIA
29242
third-party-advisory
x_refsource_SECUNIA
ADV-2007-3527
vdb-entry
x_refsource_VUPEN
1018556
vdb-entry
x_refsource_SECTRACK
26466
third-party-advisory
x_refsource_SECUNIA
20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)
mailing-list
x_refsource_BUGTRAQ
SUSE-SR:2008:005
vendor-advisory
x_refsource_SUSE
33668
third-party-advisory
x_refsource_SECUNIA
ADV-2007-2902
vdb-entry
x_refsource_VUPEN
20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities
mailing-list
x_refsource_BUGTRAQ
26898
third-party-advisory
x_refsource_SECUNIA
28361
third-party-advisory
x_refsource_SECUNIA
IZ55562
vendor-advisory
x_refsource_AIXAPAR
SSRT071472
vendor-advisory
x_refsource_HP
28317
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2008-06-30
vendor-advisory
x_refsource_APPLE
ADV-2009-0233
vdb-entry
x_refsource_VUPEN
SUSE-SR:2009:004
vendor-advisory
x_refsource_SUSE
http://tomcat.apache.org/security-6.html
x_refsource_CONFIRM
RHSA-2007:0871
vendor-advisory
x_refsource_REDHAT
ADV-2007-3386
vdb-entry
x_refsource_VUPEN
30802
third-party-advisory
x_refsource_SECUNIA
RHSA-2008:0195
vendor-advisory
x_refsource_REDHAT
27037
third-party-advisory
x_refsource_SECUNIA
25316
vdb-entry
x_refsource_BID
VU#993544
third-party-advisory
x_refsource_CERT-VN
SSRT071447
vendor-advisory
x_refsource_HP
27727
third-party-advisory
x_refsource_SECUNIA
HPSBUX02262
vendor-advisory
x_refsource_HP
20070814 CVE-2007-3382: Handling of cookies containing a ' character
mailing-list
x_refsource_BUGTRAQ
RHSA-2008:0261
vendor-advisory
x_refsource_REDHAT
36486
third-party-advisory
x_refsource_SECUNIA
HPSBTU02276
vendor-advisory
x_refsource_HP
DSA-1447
vendor-advisory
x_refsource_DEBIAN
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx
x_refsource_CONFIRM
oval:org.mitre.oval:def:11269
vdb-entry
signature
x_refsource_OVAL
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540
x_refsource_CONFIRM
tomcat-quotecookie-information-disclosure(36006)
vdb-entry
x_refsource_XF
MDKSA-2007:241
vendor-advisory
x_refsource_MANDRIVA
[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now