Back to search
CVE-2007-3385
Published: Aug 14, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
DSA-1453
vendor-advisory
x_refsource_DEBIAN
RHSA-2007:0950
vendor-advisory
x_refsource_REDHAT
http://support.apple.com/kb/HT2163
x_refsource_CONFIRM
ADV-2008-1981
vdb-entry
x_refsource_VUPEN
3011
third-party-advisory
x_refsource_SREASON
FEDORA-2007-3456
vendor-advisory
x_refsource_FEDORA
27267
third-party-advisory
x_refsource_SECUNIA
29242
third-party-advisory
x_refsource_SECUNIA
ADV-2007-3527
vdb-entry
x_refsource_VUPEN
26466
third-party-advisory
x_refsource_SECUNIA
20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)
mailing-list
x_refsource_BUGTRAQ
SUSE-SR:2008:005
vendor-advisory
x_refsource_SUSE
33668
third-party-advisory
x_refsource_SECUNIA
ADV-2007-2902
vdb-entry
x_refsource_VUPEN
20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities
mailing-list
x_refsource_BUGTRAQ
tomcat-slashcookie-information-disclosure(35999)
vdb-entry
x_refsource_XF
26898
third-party-advisory
x_refsource_SECUNIA
28361
third-party-advisory
x_refsource_SECUNIA
IZ55562
vendor-advisory
x_refsource_AIXAPAR
SSRT071472
vendor-advisory
x_refsource_HP
44183
third-party-advisory
x_refsource_SECUNIA
28317
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2008-06-30
vendor-advisory
x_refsource_APPLE
ADV-2009-0233
vdb-entry
x_refsource_VUPEN
SUSE-SR:2009:004
vendor-advisory
x_refsource_SUSE
http://tomcat.apache.org/security-6.html
x_refsource_CONFIRM
RHSA-2007:0871
vendor-advisory
x_refsource_REDHAT
ADV-2007-3386
vdb-entry
x_refsource_VUPEN
30802
third-party-advisory
x_refsource_SECUNIA
RHSA-2008:0195
vendor-advisory
x_refsource_REDHAT
27037
third-party-advisory
x_refsource_SECUNIA
1018557
vdb-entry
x_refsource_SECTRACK
25316
vdb-entry
x_refsource_BID
VU#993544
third-party-advisory
x_refsource_CERT-VN
SSRT071447
vendor-advisory
x_refsource_HP
27727
third-party-advisory
x_refsource_SECUNIA
HPSBUX02262
vendor-advisory
x_refsource_HP
RHSA-2008:0261
vendor-advisory
x_refsource_REDHAT
36486
third-party-advisory
x_refsource_SECUNIA
HPSBTU02276
vendor-advisory
x_refsource_HP
DSA-1447
vendor-advisory
x_refsource_DEBIAN
oval:org.mitre.oval:def:9549
vdb-entry
signature
x_refsource_OVAL
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx
x_refsource_CONFIRM
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540
x_refsource_CONFIRM
20070814 CVE-2007-3385: Handling of \" in cookies
mailing-list
x_refsource_BUGTRAQ
MDKSA-2007:241
vendor-advisory
x_refsource_MANDRIVA
[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now