HTTP: Apache Tomcat Form Authentication Information Disclosure

This signature detects attempts to exploit a known vulnerability against Apache Tomcat Form. A successful attack can result in the attacker gaining unauthorized information about the target system without the victim's knowledge.

Extended Description

Apache Tomcat is prone to a username-enumeration weakness because it displays different responses to login attempts, depending on whether or not the username exists. Attackers may exploit this weakness to discern valid usernames. This may aid them in brute-force password cracking or other attacks. The following are vulnerable: Tomcat 4.1.x (prior to 4.1.40) Tomcat 5.5x (prior to 5.5.28) Tomcat 6.0.x (prior to 6.0.20)

Affected Products

Debian linux

References

BugTraq: 35196

CVE: CVE-2009-0580

Short Name

HTTP:TOMCAT:FORM-AUTHENTICATION

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Apache Tomcat Form Authentication Information Disclosure

Extended Description

Affected Products

References

Found a potential security threat?