vendor:
Tomcat
by:
KINGCOPE
9
CVSS
HIGH
Remote Code Execution
287
CWE
Product Name: Tomcat
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: a:apache:tomcat
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux, Mac
2012
Apache Tomcat Remote Exploit and Account Scanner
This exploit is a modified version of the pnscan scanner utility which scans a range of IPs to find open Apache Tomcat servers. It then tries a list of login access combinations such as tomcat:tomcat, password:password, admin:admin, admin:password, admin:<nopassword>, and tomcat:<nopassword>. The included perl script can be used to unlock Apache Tomcat servers remotely by using the collected login combinations. It will retrieve either a root or SYSTEM reverse shell depending on the operating system or the equivalent of a reverse shell as the current user tomcat is running as. The exploit might contain metasploit logic.
Mitigation:
Ensure that the default passwords are changed and that the server is not exposed to the public internet.
