Skip to content
OpenAdvisories
Unscored Public exploit CVE-2007-1858 EUVD-2007-1852GHSA-cjg9-7x8h-6gw3

The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain in…

Published May 9, 2007 · Updated Aug 7, 2024 · Assigned by redhat

Description

The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Rhel Application Server 2 jakarta-commons-modeler +1 2.0-3jpp_2rh RHSA-2007:0326
Red Hat Rhel Application Server 2 tomcat5 +10 5.5.23-0jpp_4rh.3 RHSA-2007:0326
Red Hat Rhel Application Server 1 tomcat5 +2 5.0.30-0jpp_5rh RHSA-2007:0340
Red Hat Network Satellite 5 jakarta-commons-pool 1.2-2jpp_2rh RHSA-2007:1069
Red Hat Network Satellite 5 tomcat5 5.0.30-0jpp_6rh RHSA-2007:1069
Red Hat Network Satellite 5 tyrex 1.0.1-2jpp_2rh RHSA-2007:1069
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Network Satellite 4 jakarta-commons-pool 1.2-2jpp_2rh RHSA-2007:1069
Red Hat Network Satellite 4 tomcat5 5.0.30-0jpp_6rh RHSA-2007:1069
Red Hat Network Satellite 4 tyrex 1.0.1-2jpp_2rh RHSA-2007:1069

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • anthophilee/A2SV--SSL-VUL-Scan ★ 5 · Jan 1, 2021

    A2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc Support Vulnerability [CVE-2007-1858] Anonymous Cipher [CVE-2012-4929] CRIME(SPDY) [CVE-2014-0160] CCS …

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 3

References