Vulnerability Note VU#862600

Apache Tomcat SendMailServlet example vulnerable to cross-site scripting via FROM field

Overview

The example SendMailServlet page that comes with Apache Tomcat is vulnerable to cross-site scripting via the "From" field.

I. Description

Apache Tomcat is an implementation of the Java Servlet and JavaServer Page (JSP) technologies. Apache Tomcat includes a sample page called SendMailServlet, which is provided by sendmail.jsp. This page fails to properly validate input to the "From" field, which creates a cross-site scripting vulnerability. According to the vendor, the following versions of Apache Tomcat are affected

4.0.0 to 4.0.6
4.1.0 to 4.1.36

II. Impact

A remote attacker may be able to execute arbitrary script within the security context of the web site running Apache Tomcat. More information about cross-site scripting is available in CERT Advisory CA-2000-02.

III. Solution

Remove the examples web application

This vulnerability can be addressed by removing the "examples" web application.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Apache Tomcat	Vulnerable	22-Jul-2007

References

http://www.cert.org/advisories/CA-2000-02.html
http://tomcat.apache.org/security-4.html
http://seclists.org/fulldisclosure/2007/Jul/0448.html

Credit

Thanks to Tomasz Kuczynski for reporting this vulnerability.

This document was written by Will Dormann.

Other Information

Date Public:	2007-07-21
Date First Published:	2007-07-22
Date Last Updated:	2007-07-22
CERT Advisory:
CVE-ID(s):	CVE-2007-3383
NVD-ID(s):	CVE-2007-3383
US-CERT Technical Alerts:
Metric:	3.83
Document Revision:	7

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Produced 2007 by US-CERT, a government organization
Disclaimers and copyright information

Get Adobe Reader