Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:APACHE:TOMCAT-PUT-RCE |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Apache Tomcat HTTP PUT Windows Remote Code Execution |
Release Date |
2017/10/09 |
Update Number |
2997 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Apache Tomcat HTTP PUT Windows Remote Code Execution
This signature detects attempts to exploit a known vulnerability in Apache Tomcat running on Windows. A remote attacker can exploit this vulnerability by uploading a specially crafted JSP page to the vulnerable server. This can result in remote code execution in the context of the affected service.
Extended Description
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Affected Products
- Apache tomcat 7.0.0
- Apache tomcat 7.0.1
- Apache tomcat 7.0.10
- Apache tomcat 7.0.11
- Apache tomcat 7.0.12
- Apache tomcat 7.0.13
- Apache tomcat 7.0.14
- Apache tomcat 7.0.15
- Apache tomcat 7.0.16
- Apache tomcat 7.0.17
- Apache tomcat 7.0.18
- Apache tomcat 7.0.19
- Apache tomcat 7.0.2
- Apache tomcat 7.0.20
- Apache tomcat 7.0.21
- Apache tomcat 7.0.22
- Apache tomcat 7.0.23
- Apache tomcat 7.0.24
- Apache tomcat 7.0.25
- Apache tomcat 7.0.26
- Apache tomcat 7.0.27
- Apache tomcat 7.0.28
- Apache tomcat 7.0.29
- Apache tomcat 7.0.3
- Apache tomcat 7.0.30
- Apache tomcat 7.0.31
- Apache tomcat 7.0.32
- Apache tomcat 7.0.33
- Apache tomcat 7.0.34
- Apache tomcat 7.0.35
- Apache tomcat 7.0.36
- Apache tomcat 7.0.37
- Apache tomcat 7.0.38
- Apache tomcat 7.0.39
- Apache tomcat 7.0.4
- Apache tomcat 7.0.40
- Apache tomcat 7.0.41
- Apache tomcat 7.0.42
- Apache tomcat 7.0.43
- Apache tomcat 7.0.44
- Apache tomcat 7.0.45
- Apache tomcat 7.0.46
- Apache tomcat 7.0.47
- Apache tomcat 7.0.48
- Apache tomcat 7.0.49
- Apache tomcat 7.0.5
- Apache tomcat 7.0.50
- Apache tomcat 7.0.51
- Apache tomcat 7.0.54
- Apache tomcat 7.0.55
- Apache tomcat 7.0.56
- Apache tomcat 7.0.57
- Apache tomcat 7.0.58
- Apache tomcat 7.0.59
- Apache tomcat 7.0.6
- Apache tomcat 7.0.60
- Apache tomcat 7.0.61
- Apache tomcat 7.0.62
- Apache tomcat 7.0.63
- Apache tomcat 7.0.64
- Apache tomcat 7.0.65
- Apache tomcat 7.0.66
- Apache tomcat 7.0.67
- Apache tomcat 7.0.68
- Apache tomcat 7.0.69
- Apache tomcat 7.0.7
- Apache tomcat 7.0.70
- Apache tomcat 7.0.71
- Apache tomcat 7.0.72
- Apache tomcat 7.0.73
- Apache tomcat 7.0.74
- Apache tomcat 7.0.75
- Apache tomcat 7.0.76
- Apache tomcat 7.0.77
- Apache tomcat 7.0.79
- Apache tomcat 7.0.8
- Apache tomcat 7.0.80
- Apache tomcat 7.0.81
- Apache tomcat 7.0.9
- Apache tomcat 8.0.0
- Apache tomcat 8.0.1
- Apache tomcat 8.0.10
- Apache tomcat 8.0.11
- Apache tomcat 8.0.12
- Apache tomcat 8.0.13
- Apache tomcat 8.0.14
- Apache tomcat 8.0.15
- Apache tomcat 8.0.16
- Apache tomcat 8.0.17
- Apache tomcat 8.0.18
- Apache tomcat 8.0.19
- Apache tomcat 8.0.2
- Apache tomcat 8.0.20
- Apache tomcat 8.0.21
- Apache tomcat 8.0.22
- Apache tomcat 8.0.23
- Apache tomcat 8.0.24
- Apache tomcat 8.0.25
- Apache tomcat 8.0.26
- Apache tomcat 8.0.27
- Apache tomcat 8.0.28
- Apache tomcat 8.0.29
- Apache tomcat 8.0.30
- Apache tomcat 8.0.31
- Apache tomcat 8.0.32
- Apache tomcat 8.0.33
- Apache tomcat 8.0.34
- Apache tomcat 8.0.35
- Apache tomcat 8.0.36
- Apache tomcat 8.0.37
- Apache tomcat 8.0.38
- Apache tomcat 8.0.39
- Apache tomcat 8.0.4
- Apache tomcat 8.0.40
- Apache tomcat 8.0.41
- Apache tomcat 8.0.42
- Apache tomcat 8.0.43
- Apache tomcat 8.0.44
- Apache tomcat 8.0.45
- Apache tomcat 8.0.46
- Apache tomcat 8.0.6
- Apache tomcat 8.0.7
- Apache tomcat 8.0.9
- Apache tomcat 8.5.0
- Apache tomcat 8.5.1
- Apache tomcat 8.5.10
- Apache tomcat 8.5.11
- Apache tomcat 8.5.12
- Apache tomcat 8.5.13
- Apache tomcat 8.5.14
- Apache tomcat 8.5.15
- Apache tomcat 8.5.16
- Apache tomcat 8.5.17
- Apache tomcat 8.5.18
- Apache tomcat 8.5.19
- Apache tomcat 8.5.2
- Apache tomcat 8.5.20
- Apache tomcat 8.5.21
- Apache tomcat 8.5.22
- Apache tomcat 8.5.3
- Apache tomcat 8.5.4
- Apache tomcat 8.5.5
- Apache tomcat 8.5.6
- Apache tomcat 8.5.7
- Apache tomcat 8.5.8
- Apache tomcat 8.5.9
- Apache tomcat 9.0.0
References
- BugTraq: 100901
- CVE: CVE-2017-12617
- CVE: CVE-2017-12615