Description
Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a "synchronization problem" and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | tomcat5 | 5.0.30-0jpp_12rh | RHSA-2008:1007 |
Advisories 1
- RHSA-2008:1007 Red Hat Security Advisory: tomcat security update for Red Hat Network Satellite Server Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- http://tomcat.apache.org/security-4.html
- http://www.fujitsu.com/global/support/software/security/products-f/interstage-200806e.html
- http://www.nec.co.jp/security-info/secinfo/nv09-006.html
- ADV-2008-2800 vdb-entry
- 32234 third-party-advisory
- 20081009 [SECURITY] CVE-2008-3271 - Apache Tomcat information disclosure mailing-list
- 32398 third-party-advisory
- SUSE-SR:2008:023 vendor-advisory
- https://issues.apache.org/bugzilla/show_bug.cgi?id=25835
- ADV-2009-1818 vdb-entry
- 4396 third-party-advisory
- 31698 vdb-entry
- 35684 third-party-advisory
- ADV-2008-2793 vdb-entry
- http://tomcat.apache.org/security-5.html
- 1021039 vdb-entry
- apache-tomcat-valve-security-bypass(45791) vdb-entry
- JVN#30732239 third-party-advisory
- JVNDB-2008-000069 third-party-advisory
- 32213 third-party-advisory
- [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/ mailing-list