CVE-2005-2090: Tomcat Vulnerable to Web Cache Poisoning
Summary
CVE-2005-2090: Tomcat Vulnerable to Web Cache Poisoning. Affects org.apache.tomcat:tomcat across 2 version ranges.
>= 4.0.0, <= 4.1.24
>= 5.0.0, <= 5.0.19
No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Tomcat is an open-source web server and servlet container developed by the Apache Software Foundation. It is widely used for hosting Java-based web applications. The vulnerability affects Jakarta Tomcat versions 5.0.19 (Coyote/1.1) and 4.1.24 (Coyote/1.0).
Vulnerability Detail
The vulnerability allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks. By sending an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, the attacker can trick Tomcat into incorrectly handling and forwarding the body of the request. This causes the receiving server to process it as a separate HTTP request, leading to HTTP Request Smuggling.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in Tomcat allows for web cache poisoning, bypassing web application firewall protection, and conducting XSS attacks. It is recommended to upgrade to a non-affected version of Tomcat to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.apache.tomcat:tomcat →
FAQ
Tomcat is an open-source web server and servlet container developed by the Apache Software Foundation. It is widely used for hosting Java-based web applications.
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) are affected by this vulnerability.
Web cache poisoning is a technique where an attacker manipulates the contents of a web cache to serve malicious content to users.
XSS (Cross-Site Scripting) is a type of security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users.
HTTP Request Smuggling is a technique where an attacker tricks a server into processing a request in a way that differs from the server's intended behavior.
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.tomcat:tomcat.
