mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
1.2 KiB
1.2 KiB
CVE-2007-1858
Description
The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.
POC
Reference
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx
- http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
Github
- https://github.com/Ruzi79/CyberSecurityLab4
- https://github.com/elptakeover/action
- https://github.com/emarexteam/Projes
- https://github.com/emarexteam/WebsiteScannerVulnerability
- https://github.com/hashbrown1013/Spaghetti
- https://github.com/mohitrex7/Wap-Recon
- https://github.com/paroteen/SecurEagle
- https://github.com/shenril/Sitadel
- https://github.com/tag888/tag123