CVE-2009-3548 : 상세 정보

CVE-2009-3548

86.9%V4
2009-11-12
23h00 +00:00
A07-Identif. and Authent. Fail
Network
2024-08-07
06h31 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-255 Category : Credentials Management Errors
Weaknesses in this category are related to the management of credentials.

메트릭

메트릭 점수 심각도 CVSS 벡터 출처
V2 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P nvd@nist.gov

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.

익스플로잇 정보

Exploit Database EDB-ID : 16317

게시일 : 2010-12-13 23h00 +00:00
저자 : Metasploit
EDB 검증됨 : Yes

Exploit Database EDB-ID : 31433

게시일 : 2014-02-04 23h00 +00:00
저자 : Metasploit
EDB 검증됨 : Yes

언급된 제품

구성 0

Apache>>Tomcat >> Version 3.0

Apache>>Tomcat >> Version 3.1

Apache>>Tomcat >> Version 3.1.1

Apache>>Tomcat >> Version 3.2

Apache>>Tomcat >> Version 3.2.1

Apache>>Tomcat >> Version 3.2.2

Apache>>Tomcat >> Version 3.2.2

Apache>>Tomcat >> Version 3.2.3

Apache>>Tomcat >> Version 3.2.4

Apache>>Tomcat >> Version 3.3

Apache>>Tomcat >> Version 3.3.1

Apache>>Tomcat >> Version 3.3.1a

Apache>>Tomcat >> Version 3.3.2

Apache>>Tomcat >> Version 4.0.0

Apache>>Tomcat >> Version 4.0.1

Apache>>Tomcat >> Version 4.0.2

Apache>>Tomcat >> Version 4.0.3

Apache>>Tomcat >> Version 4.0.4

Apache>>Tomcat >> Version 4.0.5

Apache>>Tomcat >> Version 4.0.6

Apache>>Tomcat >> Version 4.1.0

Apache>>Tomcat >> Version 4.1.1

Apache>>Tomcat >> Version 4.1.2

Apache>>Tomcat >> Version 4.1.3

Apache>>Tomcat >> Version 4.1.3

Apache>>Tomcat >> Version 4.1.4

Apache>>Tomcat >> Version 4.1.5

Apache>>Tomcat >> Version 4.1.6

Apache>>Tomcat >> Version 4.1.7

Apache>>Tomcat >> Version 4.1.8

Apache>>Tomcat >> Version 4.1.9

Apache>>Tomcat >> Version 4.1.9

Apache>>Tomcat >> Version 4.1.10

Apache>>Tomcat >> Version 4.1.11

Apache>>Tomcat >> Version 4.1.12

Apache>>Tomcat >> Version 4.1.13

Apache>>Tomcat >> Version 4.1.14

Apache>>Tomcat >> Version 4.1.15

Apache>>Tomcat >> Version 4.1.16

Apache>>Tomcat >> Version 4.1.17

Apache>>Tomcat >> Version 4.1.18

Apache>>Tomcat >> Version 4.1.19

Apache>>Tomcat >> Version 4.1.20

Apache>>Tomcat >> Version 4.1.21

Apache>>Tomcat >> Version 4.1.22

Apache>>Tomcat >> Version 4.1.23

Apache>>Tomcat >> Version 4.1.24

Apache>>Tomcat >> Version 4.1.25

Apache>>Tomcat >> Version 4.1.26

Apache>>Tomcat >> Version 4.1.27

Apache>>Tomcat >> Version 4.1.28

Apache>>Tomcat >> Version 4.1.29

Apache>>Tomcat >> Version 4.1.30

Apache>>Tomcat >> Version 4.1.31

Apache>>Tomcat >> Version 4.1.32

Apache>>Tomcat >> Version 4.1.33

Apache>>Tomcat >> Version 4.1.34

Apache>>Tomcat >> Version 4.1.35

Apache>>Tomcat >> Version 4.1.36

Apache>>Tomcat >> Version 4.1.37

Apache>>Tomcat >> Version 4.1.38

Apache>>Tomcat >> Version 4.1.39

Apache>>Tomcat >> Version 5.0.0

Apache>>Tomcat >> Version 5.0.1

Apache>>Tomcat >> Version 5.0.2

Apache>>Tomcat >> Version 5.0.3

Apache>>Tomcat >> Version 5.0.4

Apache>>Tomcat >> Version 5.0.5

Apache>>Tomcat >> Version 5.0.6

Apache>>Tomcat >> Version 5.0.7

Apache>>Tomcat >> Version 5.0.8

Apache>>Tomcat >> Version 5.0.9

Apache>>Tomcat >> Version 5.0.10

Apache>>Tomcat >> Version 5.0.11

Apache>>Tomcat >> Version 5.0.12

Apache>>Tomcat >> Version 5.0.13

Apache>>Tomcat >> Version 5.0.14

Apache>>Tomcat >> Version 5.0.15

Apache>>Tomcat >> Version 5.0.16

Apache>>Tomcat >> Version 5.0.17

Apache>>Tomcat >> Version 5.0.18

Apache>>Tomcat >> Version 5.0.19

Apache>>Tomcat >> Version 5.0.21

Apache>>Tomcat >> Version 5.0.22

Apache>>Tomcat >> Version 5.0.23

Apache>>Tomcat >> Version 5.0.24

Apache>>Tomcat >> Version 5.0.25

Apache>>Tomcat >> Version 5.0.26

Apache>>Tomcat >> Version 5.0.27

Apache>>Tomcat >> Version 5.0.28

Apache>>Tomcat >> Version 5.0.29

Apache>>Tomcat >> Version 5.0.30

Apache>>Tomcat >> Version 5.5.0

Apache>>Tomcat >> Version 5.5.1

Apache>>Tomcat >> Version 5.5.2

Apache>>Tomcat >> Version 5.5.3

Apache>>Tomcat >> Version 5.5.4

Apache>>Tomcat >> Version 5.5.5

Apache>>Tomcat >> Version 5.5.6

Apache>>Tomcat >> Version 5.5.7

Apache>>Tomcat >> Version 5.5.8

Apache>>Tomcat >> Version 5.5.9

Apache>>Tomcat >> Version 5.5.10

Apache>>Tomcat >> Version 5.5.11

Apache>>Tomcat >> Version 5.5.12

Apache>>Tomcat >> Version 5.5.13

Apache>>Tomcat >> Version 5.5.14

Apache>>Tomcat >> Version 5.5.15

Apache>>Tomcat >> Version 5.5.16

Apache>>Tomcat >> Version 5.5.17

Apache>>Tomcat >> Version 5.5.18

Apache>>Tomcat >> Version 5.5.19

Apache>>Tomcat >> Version 5.5.20

Apache>>Tomcat >> Version 5.5.21

Apache>>Tomcat >> Version 5.5.22

Apache>>Tomcat >> Version 5.5.23

Apache>>Tomcat >> Version 5.5.24

Apache>>Tomcat >> Version 5.5.25

Apache>>Tomcat >> Version 5.5.26

Apache>>Tomcat >> Version 5.5.27

Apache>>Tomcat >> Version 5.5.28

Apache>>Tomcat >> Version 6.0

Apache>>Tomcat >> Version 6.0.0

Apache>>Tomcat >> Version 6.0.1

Apache>>Tomcat >> Version 6.0.2

Apache>>Tomcat >> Version 6.0.3

Apache>>Tomcat >> Version 6.0.4

Apache>>Tomcat >> Version 6.0.5

Apache>>Tomcat >> Version 6.0.6

Apache>>Tomcat >> Version 6.0.7

Apache>>Tomcat >> Version 6.0.8

Apache>>Tomcat >> Version 6.0.9

Apache>>Tomcat >> Version 6.0.10

Apache>>Tomcat >> Version 6.0.11

Apache>>Tomcat >> Version 6.0.12

Apache>>Tomcat >> Version 6.0.13

Apache>>Tomcat >> Version 6.0.14

Apache>>Tomcat >> Version 6.0.15

Apache>>Tomcat >> Version 6.0.16

Apache>>Tomcat >> Version 6.0.17

Apache>>Tomcat >> Version 6.0.18

Apache>>Tomcat >> Version 6.0.20

참고 자료

http://marc.info/?l=bugtraq&m=127420533226623&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=136485229118404&w=2
Tags : vendor-advisory, x_refsource_HP
http://secunia.com/advisories/40330
Tags : third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=127420533226623&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2010/1559
Tags : vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=133469267822771&w=2
Tags : vendor-advisory, x_refsource_HP
http://secunia.com/advisories/57126
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/36954
Tags : vdb-entry, x_refsource_BID
http://marc.info/?l=bugtraq&m=133469267822771&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2009/3185
Tags : vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=136485229118404&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=139344343412337&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id?1023146
Tags : vdb-entry, x_refsource_SECTRACK