CVE-2009-0033
Apache Tomcat Denial of Service via Malformed Request Headers
5.0 Medium
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.
Exploit likelihood
10.1%Up 2.7 points since Feb 4, 2022
What each source reports
NVD Score used
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.
- Record
CVE-2009-0033- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.
- Record
CVE-2009-0033- Updated
- 2026-11-02
EUVDEUVD-2022-2567 No score
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.
- Record
EUVD-2022-2567- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5cw4-ggx9-36vg No score
Apache Tomcat Denial of Service via Malformed Request Headers
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.
- Record
GHSA-5cw4-ggx9-36vg- Weakness
- CWE-20, CWE-400
- Updated
- 2026-11-02
OSVGHSA-5cw4-ggx9-36vg No score
Apache Tomcat Denial of Service via Malformed Request Headers
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.
- Record
GHSA-5cw4-ggx9-36vg- Weakness
- CWE-20, CWE-400
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven |
4.1.0 to 4.1.39 | None known |
org.apache.tomcat:tomcatMaven |
5.5.0 to 5.5.27 | None known |
org.apache.tomcat:tomcatMaven |
6.0.0 to 6.0.18 | None known |
tomcat5.5Debian:5.0 From an advisory covering 9 CVEs |
before 5.5.26-5lenny2, plus listed versions 5.5.26-5 |
5.5.26-5lenny2 |
tomcat5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-common-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasperRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
Show 131 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-server-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5Red Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-common-libRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasperRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-server-libRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-webappsRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat5Red Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-admin-webappsRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasper-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-webappsRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5Red Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-common-libRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jasperRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jsp-2.0-apiRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-server-libRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-servlet-2.4-apiRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5Red Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-common-libRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jasperRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jsp-2.0-apiRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-server-libRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-servlet-2.4-apiRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5Red Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-common-libRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jasperRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jsp-2.0-apiRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-server-libRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-servlet-2.4-apiRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5Red Hat:network_satellite:5.1::el4 From an advisory covering 3 CVEs |
before 0:5.0.30-0jpp_16rh | 0:5.0.30-0jpp_16rh |
antRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0033 is a medium vulnerability (CVSS 5.0) in Apache Tomcat, published June 5, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.1%, the 95th percentile. No source names a fixed version.
References
tomcat.apache.org/security-4.html
marc.info?l=bugtraq&m=127420533226623&w=2
secunia.com/advisories/35326
mandriva.com/security/advisories?name=MDVSA-2009:138
redhat.com/archives/fedora-package-announce/2009-November/msg01246.html
debian.org/security/2011/dsa-2207
Show 194 moreShow less
vupen.com/english/advisories/2010/3056
vmware.com/security/advisories/VMSA-2009-0016.html
lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
jvn.jp/en/jp/JVN87272440/index.html
securitytracker.com/id?1022331
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10231
securityfocus.com/bid/35193
support.apple.com/kb/HT4077
svn.apache.org/viewvc?rev=742915&view=rev
lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1
exchange.xforce.ibmcloud.com/vulnerabilities/50928
lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2009-0033
github.com/advisories/GHSA-5cw4-ggx9-36vg
access.redhat.com/errata/RHSA-2009:1164
bugzilla.redhat.com/show_bug.cgi?id=427766
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1164.json
cve.org/CVERecord?id=CVE-2007-5333
This page doesn't list everything
Left out here: 37 references. The JSON record has them.