Oval Definition:oval:com.ubuntu.precise:def:20125887000
Revision Date:2012-11-17Version:1
Title:CVE-2012-5887 on Ubuntu 12.04 LTS (precise) - medium.
Description:The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2012-5887
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND Package Information
  • The 'tomcat6' package in precise was vulnerable but has been fixed (note: '6.0.35-1ubuntu3.1').
  • OR The 'tomcat7' package in precise was vulnerable but has been fixed (note: '7.0.26-1ubuntu1.2').
    • BACK