CVE-2007-3385 Apache Tomcat Mishandles Character Sequence in Cookies
Improper cookie handling in Apache Tomcat allows remote attackers to leak session IDs and hijack user sessions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-3385?
CVE-2007-3385 is a medium-severity vulnerability in Apache Tomcat, published on 14 Aug 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.
Weakness: CWE-200
Which versions are affected by CVE-2007-3385?
10 open source packages ship an affected version, including org.apache.tomcat:tomcat. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
org.apache.tomcat:tomcat Maven | From 3.3.0 to 3.3.2 | None |
org.apache.tomcat:tomcat Maven | From 3.3.0 to 3.3.2 | None |
org.apache.tomcat:tomcat Maven | From 4.1.0 to 4.1.36 | None |
org.apache.tomcat:tomcat Maven | From 4.1.0 to 4.1.36 | None |
org.apache.tomcat:tomcat Maven | From 5.0.0 to 5.0.30 | None |
org.apache.tomcat:tomcat Maven | From 5.0.0 to 5.0.30 | None |
4 more packages
org.apache.tomcat:tomcat Maven | From 5.5.0 to 5.5.24 | None |
org.apache.tomcat:tomcat Maven | From 5.5.0 to 5.5.24 | None |
org.apache.tomcat:tomcat Maven | From 6.0.0 to 6.0.13 | None |
org.apache.tomcat:tomcat Maven | From 6.0.0 to 6.0.13 | None |
Products include Apache Tomcat.
How do I fix CVE-2007-3385?
Upgrade to a fixed version.
Is CVE-2007-3385 being exploited?
There is no known exploitation of CVE-2007-3385 in the wild and no public exploit code.
Other vulnerabilities in Apache Tomcat
Sources
Also known as GHSA-6j8f-66vh-39mj.