NVD脆弱性詳細

CVE-2012-3544

概要	Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.
公表日	2013年6月1日23:21
登録日	2021年1月28日15:00
最終更新日	2024年11月21日10:41

CVSS2.0 : MEDIUM
スコア	5.0
ベクター	AV:N/AC:L/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:6.0.33:::::::*
cpe:2.3:a:apache:tomcat:6.0.0:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.6:::::::*
cpe:2.3:a:apache:tomcat:6.0.4:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.11:::::::*
cpe:2.3:a:apache:tomcat:6.0.7:::::::*
cpe:2.3:a:apache:tomcat:6.0.4:::::::*
cpe:2.3:a:apache:tomcat:6.0.15:::::::*
cpe:2.3:a:apache:tomcat:6.0.20:::::::*
cpe:2.3:a:apache:tomcat:6.0.9:beta::::::
cpe:2.3:a:apache:tomcat:6.0.10:::::::*
cpe:2.3:a:apache:tomcat:6.0.31:::::::*
cpe:2.3:a:apache:tomcat:6.0.29:::::::*
cpe:2.3:a:apache:tomcat:6.0.3:::::::*
cpe:2.3:a:apache:tomcat:6.0.9:::::::*
cpe:2.3:a:apache:tomcat:6.0.1:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.7:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.24:::::::*
cpe:2.3:a:apache:tomcat:6.0.17:::::::*
cpe:2.3:a:apache:tomcat:6.0:::::::*
cpe:2.3:a:apache:tomcat:6.0.32:::::::*
cpe:2.3:a:apache:tomcat:6.0.28:::::::*
cpe:2.3:a:apache:tomcat:6.0.0:::::::*
cpe:2.3:a:apache:tomcat:6.0.14:::::::*
cpe:2.3:a:apache:tomcat:6.0.6:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.1:::::::*
cpe:2.3:a:apache:tomcat:6.0.12:::::::*
cpe:2.3:a:apache:tomcat:6.0.18:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.5:::::::*
cpe:2.3:a:apache:tomcat:6.0.7:beta::::::
cpe:2.3:a:apache:tomcat:6.0.30:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:beta::::::
cpe:2.3:a:apache:tomcat:6.0.13:::::::*
cpe:2.3:a:apache:tomcat:6.0.8:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.26:::::::*
cpe:2.3:a:apache:tomcat:6.0.19:::::::*
cpe:2.3:a:apache:tomcat:6.0.27:::::::*
cpe:2.3:a:apache:tomcat:6.0.35:::::::*
cpe:2.3:a:apache:tomcat:6.0.16:::::::*
cpe:2.3:a:apache:tomcat:6.0.36:::::::*
cpe:2.3:a:apache:tomcat:6.0.8:::::::*

構成2	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:7.0.2:beta::::::
cpe:2.3:a:apache:tomcat:7.0.12:::::::*
cpe:2.3:a:apache:tomcat:7.0.20:::::::*
cpe:2.3:a:apache:tomcat:7.0.8:::::::*
cpe:2.3:a:apache:tomcat:7.0.1:::::::*
cpe:2.3:a:apache:tomcat:7.0.2:::::::*
cpe:2.3:a:apache:tomcat:7.0.5:::::::*
cpe:2.3:a:apache:tomcat:7.0.4:beta::::::
cpe:2.3:a:apache:tomcat:7.0.22:::::::*
cpe:2.3:a:apache:tomcat:7.0.28:::::::*
cpe:2.3:a:apache:tomcat:7.0.0:::::::*
cpe:2.3:a:apache:tomcat:7.0.6:::::::*
cpe:2.3:a:apache:tomcat:7.0.18:::::::*
cpe:2.3:a:apache:tomcat:7.0.14:::::::*
cpe:2.3:a:apache:tomcat:7.0.11:::::::*
cpe:2.3:a:apache:tomcat:7.0.23:::::::*
cpe:2.3:a:apache:tomcat:7.0.0:beta::::::
cpe:2.3:a:apache:tomcat:7.0.7:::::::*
cpe:2.3:a:apache:tomcat:7.0.13:::::::*
cpe:2.3:a:apache:tomcat:7.0.15:::::::*
cpe:2.3:a:apache:tomcat:7.0.19:::::::*
cpe:2.3:a:apache:tomcat:7.0.16:::::::*
cpe:2.3:a:apache:tomcat:7.0.10:::::::*
cpe:2.3:a:apache:tomcat:7.0.25:::::::*
cpe:2.3:a:apache:tomcat:7.0.21:::::::*
cpe:2.3:a:apache:tomcat:7.0.17:::::::*
cpe:2.3:a:apache:tomcat:7.0.9:::::::*
cpe:2.3:a:apache:tomcat:7.0.4:::::::*
cpe:2.3:a:apache:tomcat:7.0.3:::::::*

関連情報、対策とツール

No	URL	タグ
1	http://archives.neohapsis.com/archives/bugtraq/2013-05/0042.html
2	http://archives.neohapsis.com/archives/bugtraq/2013-05/0042.html
3	http://seclists.org/fulldisclosure/2014/Dec/23
4	http://seclists.org/fulldisclosure/2014/Dec/23
5	http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/coyote/http11/filters/ChunkedInputFilter.java?r1=1476592&r2=1476591&pathrev=1476592	Patch
6	http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/coyote/http11/filters/ChunkedInputFilter.java?r1=1476592&r2=1476591&pathrev=1476592	Patch
7	http://svn.apache.org/viewvc?view=revision&revision=1378702	Patch
8	http://svn.apache.org/viewvc?view=revision&revision=1378702	Patch
9	http://svn.apache.org/viewvc?view=revision&revision=1378921	Patch
10	http://svn.apache.org/viewvc?view=revision&revision=1378921	Patch
11	http://svn.apache.org/viewvc?view=revision&revision=1476592	Patch
12	http://svn.apache.org/viewvc?view=revision&revision=1476592	Patch
13	http://tomcat.apache.org/security-6.html	Vendor Advisory
14	http://tomcat.apache.org/security-6.html	Vendor Advisory
15	http://tomcat.apache.org/security-7.html	Vendor Advisory
16	http://tomcat.apache.org/security-7.html	Vendor Advisory
17	http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
18	http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
19	http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
20	http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
21	http://www.securityfocus.com/archive/1/534161/100/0/threaded
22	http://www.securityfocus.com/archive/1/534161/100/0/threaded
23	http://www.securityfocus.com/bid/59797
24	http://www.securityfocus.com/bid/59797
25	http://www.securityfocus.com/bid/64758
26	http://www.securityfocus.com/bid/64758
27	http://www.ubuntu.com/usn/USN-1841-1
28	http://www.ubuntu.com/usn/USN-1841-1
29	http://www.vmware.com/security/advisories/VMSA-2014-0012.html
30	http://www.vmware.com/security/advisories/VMSA-2014-0012.html
31	https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
32	https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
33	https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
34	https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
35	https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
36	https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
37	https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
38	https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
39	https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
40	https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
41	https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
42	https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html

JVN脆弱性情報

Apache Tomcat におけるサービス運用妨害 (DoS) の脆弱性

タイトル	Apache Tomcat におけるサービス運用妨害 (DoS) の脆弱性
概要	Apache Tomcat は、チャンク転送コーディング (chunked transfer coding) のチャンク拡張 (chunk extension) を適切に処理しないため、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。本脆弱性は、CVE-2013-4322 と関連する問題です。
想定される影響	第三者により、データをストリーミングされることで、サービス運用妨害 (DoS) 状態にされる可能性があります。
対策	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日	2012年9月6日0:00
登録日	2013年6月4日13:50
最終更新日	2016年8月2日17:34

影響を受けるシステム

Apache Software Foundation

Apache Tomcat 6.0.37 未満の 6.x

Apache Tomcat 7.0.30 未満の 7.x

オラクル

Oracle Fusion Middleware の Oracle Enterprise Data Quality 8.1

Oracle Fusion Middleware の Oracle Enterprise Data Quality 9.0.8

Oracle Supply Chain Products Suite の Oracle Transportation Management 6.0

Oracle Supply Chain Products Suite の Oracle Transportation Management 6.1

Oracle Supply Chain Products Suite の Oracle Transportation Management 6.2

Oracle Supply Chain Products Suite の Oracle Transportation Management 6.3

Oracle Supply Chain Products Suite の Oracle Transportation Management 6.3.1

Oracle Supply Chain Products Suite の Oracle Transportation Management 6.3.2

Oracle Virtualization の Oracle Secure Global Desktop 4.63 with December 2013 PSU 未満

Oracle Virtualization の Oracle Secure Global Desktop 4.71 未満

Oracle Virtualization の Oracle Virtual Desktop Infrastructure 3.5.1 未満

Oracle Virtualization の Sun Ray Software 5.4.3 未満

日本電気

CSVIEW /FAQナビすべてのバージョン

WebOTX Application Server Enterprise Edition V8.1

WebOTX Application Server Enterprise V8.2 から V8.5

WebOTX Application Server Express V8.2 から V8.5

WebOTX Application Server Foundation V8.2 から V8.5

WebOTX Application Server Standard Edition V8.1

WebOTX Application Server Standard V8.2 から V8.5

WebOTX Application Server Standard-J Edition V8.1

WebOTX Application Server Web Edition V8.1

WebOTX Developer V8.1 から V8.5

WebOTX Enterprise Service Bus V8.1 から V8.5

WebOTX Portal V8.2 から V8.5

WebOTX SIP Application Server Standard Edition V8.1

WebSAM SECUREMASTER AccessControlServer 5

WebSAM SECUREMASTER AccessControlServer 6

WebSAM SECUREMASTER AccessControlServer 7

WebSAM SECUREMASTER EnterpriseAccessManager 5

WebSAM SECUREMASTER EnterpriseAccessManager 6

WebSAM SECUREMASTER EnterpriseAccessManager 7

WebSAM Storage VASA Provider V1.1.001

WebSAM Storage VMware vSphere Web Client Plug-in V1.1

WebSAM Storage VMware vCenter Plug-in V1.1.001

WebSAM Storage VMware vCenter Plug-in V1.2.001

日立

Cosminexus Component Container

uCosminexus Application Server

uCosminexus Application Server (64)

uCosminexus Application Server -R

uCosminexus Application Server Express

uCosminexus Application Server Light

uCosminexus Application Server Standard-R

uCosminexus Application Server Enterprise

uCosminexus Application Server Enterprise Custom Edition

uCosminexus Application Server Smart Edition

uCosminexus Application Server Standard

uCosminexus Application Server Standard Custom Edition

uCosminexus Developer

uCosminexus Developer 01

uCosminexus Developer Professional

uCosminexus Developer Professional for ATM

uCosminexus Developer Professional for Plug-in

uCosminexus Developer Light

uCosminexus Developer Standard

uCosminexus Service Architect

uCosminexus Service Platform

uCosminexus Service Platform (64)

uCosminexus Service Platform - Messaging

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-3544	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3544
National Vulnerability Database (NVD)
2	CVE-2012-3544	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-3544

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	名前	URL
Apache Tomcat
1	security-6	http://tomcat.apache.org/security-6.html
2	security-7	http://tomcat.apache.org/security-7.html
Apache-SVN
3	Diff of /tomcat/tc6.0.x/trunk/java/org/apache/coyote/http11/filters/ChunkedInputFilter.java	http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/coyote/http11/filters/ChunkedInputFilter.java?r1=1476592&r2=1476591&pathrev=1476592
4	Revision 1378702	http://svn.apache.org/viewvc?view=revision&revision=1378702
5	Revision 1378921	http://svn.apache.org/viewvc?view=revision&revision=1378921
6	Revision 1476592	http://svn.apache.org/viewvc?view=revision&revision=1476592
Hitachi Software Vulnerability Information
7	HS13-016	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-016/index.html
NEC製品セキュリティ情報
8	NV14-003	http://jpn.nec.com/security-info/secinfo/nv14-003.html
Oracle Critical Patch Update
9	Oracle Critical Patch Update Advisory - January 2014	http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
10	Oracle Critical Patch Update Advisory - July 2014	http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
11	Text Form of Oracle Critical Patch Update - January 2014 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujan2014verbose-1972951.html
12	Text Form of Oracle Critical Patch Update - July 2014 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujul2014verbose-1972958.html
SECURITY BLOG
13	January 2014 Critical Patch Update Released	https://blogs.oracle.com/security/entry/january_2014_critical_patch_update
14	July 2014 Critical Patch Update Released	https://blogs.oracle.com/security/entry/july_2014_critical_patch_update
15	Multiple vulnerabilities in Apache Tomcat	https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_apache_tomcat4
16	Multiple vulnerabilities in Tomcat	https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_tomcat
ソフトウェア製品セキュリティ情報
17	HS13-016	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS13-016/index.html

変更履歴

No	変更内容	変更日
0	[2013年06月04日] 掲載 [2013年07月08日] 影響を受けるシステム：日立 (HS13-016) の情報を追加ベンダ情報：日立 (HS13-016) を追加 [2013年10月24日] ベンダ情報：オラクル (Multiple vulnerabilities in Tomcat) を追加 [2014年01月22日] 影響を受けるシステム：オラクル (Oracle Critical Patch Update Advisory - January 2014) の情報を追加ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - January 2014) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - January 2014 Risk Matrices) を追加ベンダ情報：オラクル (January 2014 Critical Patch Update Released) を追加 [2014年03月13日] 概要：内容を更新 [2014年05月09日] 影響を受けるシステム：日本電気 (NV14-003) の情報を追加ベンダ情報：日本電気 (NV14-003) を追加 [2014年06月02日] ベンダ情報：オラクル (Multiple vulnerabilities in Apache Tomcat) を追加 [2014年06月03日] 影響を受けるシステム：内容を更新 [2014年07月18日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2014) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - July 2014 Risk Matrices) を追加ベンダ情報：オラクル (July 2014 Critical Patch Update Released) を追加 [2014年08月06日] 影響を受けるシステム：内容を更新 [2016年08月02日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新	2018年2月17日10:37

構成1	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:6.0.33:::::::*
cpe:2.3:a:apache:tomcat:6.0.0:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.6:::::::*
cpe:2.3:a:apache:tomcat:6.0.4:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.11:::::::*
cpe:2.3:a:apache:tomcat:6.0.7:::::::*
cpe:2.3:a:apache:tomcat:6.0.4:::::::*
cpe:2.3:a:apache:tomcat:6.0.15:::::::*
cpe:2.3:a:apache:tomcat:6.0.20:::::::*
cpe:2.3:a:apache:tomcat:6.0.9:beta::::::
cpe:2.3:a:apache:tomcat:6.0.10:::::::*
cpe:2.3:a:apache:tomcat:6.0.31:::::::*
cpe:2.3:a:apache:tomcat:6.0.29:::::::*
cpe:2.3:a:apache:tomcat:6.0.3:::::::*
cpe:2.3:a:apache:tomcat:6.0.9:::::::*
cpe:2.3:a:apache:tomcat:6.0.1:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.7:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.24:::::::*
cpe:2.3:a:apache:tomcat:6.0.17:::::::*
cpe:2.3:a:apache:tomcat:6.0:::::::*
cpe:2.3:a:apache:tomcat:6.0.32:::::::*
cpe:2.3:a:apache:tomcat:6.0.28:::::::*
cpe:2.3:a:apache:tomcat:6.0.0:::::::*
cpe:2.3:a:apache:tomcat:6.0.14:::::::*
cpe:2.3:a:apache:tomcat:6.0.6:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.1:::::::*
cpe:2.3:a:apache:tomcat:6.0.12:::::::*
cpe:2.3:a:apache:tomcat:6.0.18:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.5:::::::*
cpe:2.3:a:apache:tomcat:6.0.7:beta::::::
cpe:2.3:a:apache:tomcat:6.0.30:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:beta::::::
cpe:2.3:a:apache:tomcat:6.0.13:::::::*
cpe:2.3:a:apache:tomcat:6.0.8:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.26:::::::*
cpe:2.3:a:apache:tomcat:6.0.19:::::::*
cpe:2.3:a:apache:tomcat:6.0.27:::::::*
cpe:2.3:a:apache:tomcat:6.0.35:::::::*
cpe:2.3:a:apache:tomcat:6.0.16:::::::*
cpe:2.3:a:apache:tomcat:6.0.36:::::::*
cpe:2.3:a:apache:tomcat:6.0.8:::::::*

構成2	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:7.0.2:beta::::::
cpe:2.3:a:apache:tomcat:7.0.12:::::::*
cpe:2.3:a:apache:tomcat:7.0.20:::::::*
cpe:2.3:a:apache:tomcat:7.0.8:::::::*
cpe:2.3:a:apache:tomcat:7.0.1:::::::*
cpe:2.3:a:apache:tomcat:7.0.2:::::::*
cpe:2.3:a:apache:tomcat:7.0.5:::::::*
cpe:2.3:a:apache:tomcat:7.0.4:beta::::::
cpe:2.3:a:apache:tomcat:7.0.22:::::::*
cpe:2.3:a:apache:tomcat:7.0.28:::::::*
cpe:2.3:a:apache:tomcat:7.0.0:::::::*
cpe:2.3:a:apache:tomcat:7.0.6:::::::*
cpe:2.3:a:apache:tomcat:7.0.18:::::::*
cpe:2.3:a:apache:tomcat:7.0.14:::::::*
cpe:2.3:a:apache:tomcat:7.0.11:::::::*
cpe:2.3:a:apache:tomcat:7.0.23:::::::*
cpe:2.3:a:apache:tomcat:7.0.0:beta::::::
cpe:2.3:a:apache:tomcat:7.0.7:::::::*
cpe:2.3:a:apache:tomcat:7.0.13:::::::*
cpe:2.3:a:apache:tomcat:7.0.15:::::::*
cpe:2.3:a:apache:tomcat:7.0.19:::::::*
cpe:2.3:a:apache:tomcat:7.0.16:::::::*
cpe:2.3:a:apache:tomcat:7.0.10:::::::*
cpe:2.3:a:apache:tomcat:7.0.25:::::::*
cpe:2.3:a:apache:tomcat:7.0.21:::::::*
cpe:2.3:a:apache:tomcat:7.0.17:::::::*
cpe:2.3:a:apache:tomcat:7.0.9:::::::*
cpe:2.3:a:apache:tomcat:7.0.4:::::::*
cpe:2.3:a:apache:tomcat:7.0.3:::::::*