Lucene search

Basic search
Lucene search
Search by product

Vendors

Products

[email protected]ATLASSIAN:CONFSERVER-10445

HistoryJan 15, 2008 - 4:23 a.m.

Upgrade standalone Tomcat to 5.5.25

2008-01-1504:23:59

[email protected]

jira.atlassian.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.969 High

EPSS

Percentile

99.6%

JSON

We should bundle the latest version of Tomcat with standalone to pick up some fixes including the security vulnerability detailed at:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3382
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385

CPENameOperatorVersion
confluence serverle2.6.0
confluence serverle2.7

CPE	Name	Operator	Version
	confluence server	le	2.6.0
	confluence server	le	2.7

atlassian 1

seebug 8

redhat 10

veracode 5

ubuntucve 5

cve 6

osv 9

prion 6

github 6

openvas 41

nessus 45

centos 2

oraclelinux 2

debian 2

securityvulns 13

fedora 7

exploitpack 3

tomcat 8

cert 2

f5 3

packetstorm 4

checkpoint_advisories 2

dsquare 1

d2 1

exploitdb 3

jvn 1

altlinux 1

vmware 2

atlassian

Upgrade standalone Tomcat to 5.5.25

2008-01-15 04:23:59

seebug

Apache Tomcat多个远程信息泄露漏洞

2007-08-23 00:00:00

Apache Tomcat <= 6.0.15 Cookie Quote Handling Remote Information Disclosure Vulnerability

2014-07-01 00:00:00

Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability

2008-08-11 00:00:00

redhat

(RHSA-2007:0950) Moderate: JBoss Enterprise Application Platform security update

2007-11-05 00:00:00

(RHSA-2007:0871) Moderate: tomcat security update

2007-09-26 00:00:00

(RHSA-2008:0877) Important: jbossweb security update

2008-09-22 00:00:00

veracode

Session Hijacking

2018-11-13 05:10:16

Information Disclosure

2019-03-25 08:40:44

Directory Traversal

2018-11-09 07:23:15

ubuntucve

CVE-2008-2938

2008-08-13 00:00:00

CVE-2007-3385

2007-08-14 00:00:00

CVE-2007-3382

2007-08-14 00:00:00

cve

CVE-2008-2938

2008-08-13 00:41:00

CVE-2007-3382

2007-08-14 22:17:00

CVE-2007-3385

2007-08-14 22:17:00

osv

Apache Tomcat Directory Traversal vulnerability

2022-05-01 23:55:04

tomcat5 - several vulnerabilities

2008-01-07 00:00:00

tomcat5.5 several vulnerabilities

2008-01-03 00:00:00

prion

Directory traversal

2008-08-13 00:41:00

Design/Logic Flaw

2007-08-14 22:17:00

Session fixation

2007-08-14 22:17:00

github

Apache Tomcat Directory Traversal vulnerability

2022-05-01 23:55:04

Apache Tomcat Mishandles Character Sequence in Cookies

2022-05-01 18:13:14

Apache Tomcat treats single quotes as delimiters in cookies

2022-05-01 18:13:14

openvas

Debian Security Advisory DSA 1453-1 (tomcat5)

2008-01-17 00:00:00

Oracle Linux Local Check: ELSA-2007-0871

2015-10-08 00:00:00

RedHat Update for tomcat RHSA-2008:0648-01

2009-03-06 00:00:00

nessus

Oracle Linux 5 : tomcat (ELSA-2007-0871)

2013-07-12 00:00:00

CentOS 5 : tomcat (CESA-2007:0871)

2010-01-06 00:00:00

RHEL 5 : tomcat (RHSA-2007:0871)

2007-09-26 00:00:00

centos

tomcat5 security update

2007-09-28 08:11:50

tomcat5 security update

2008-08-28 22:01:41

oraclelinux

Moderate: tomcat security update

2007-09-26 00:00:00

tomcat security update

2008-08-27 00:00:00

debian

[SECURITY] [DSA 1453-1] New tomcat5 packages fix several vulnerabilities

2008-01-07 18:41:20

[SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities

2008-01-03 21:54:49

securityvulns

Apache Tomcat multiple security vulnerabilities

2009-01-28 00:00:00

CVE-2007-3382: Handling of cookies containing a ' character

2007-08-14 00:00:00

CVE-2007-3385: Handling of \" in cookies

2007-08-14 00:00:00

fedora

[SECURITY] Fedora 9 Update: tomcat5-5.5.27-0jpp.2.fc9

2008-09-16 23:25:10

[SECURITY] Fedora 9 Update: tomcat6-6.0.18-1.1.fc9

2008-09-11 17:17:43

[SECURITY] Fedora 8 Update: tomcat5-5.5.27-0jpp.2.fc8

2008-09-16 23:28:35

exploitpack

Apache Tomcat 6.0.15 - Cookie Quote Handling Remote Information Disclosure

2008-02-09 00:00:00

Apache Tomcat 6.0.18 - utf8 Directory Traversal (PoC)

2008-08-11 00:00:00

toutvirtual virtualiq pro 3.2 - Multiple Vulnerabilities

2009-11-07 00:00:00

tomcat

Fixed in Apache Tomcat 6.0.14

2007-08-13 00:00:00

Fixed in Apache Tomcat 5.5.25, 5.0.SVN

2007-09-08 00:00:00

Fixed in Apache Tomcat 4.1.37

2005-10-06 00:00:00

cert

Apache Tomcat fails to properly handle cookies containing single quotes

2007-08-14 00:00:00

Apache Tomcat UTF8 Directory Traversal Vulnerability

2008-08-19 00:00:00

SOL9110 - Apache Tomcat information disclosure vulnerability - CVE-2008-2370

2008-09-01 00:00:00

K9110 : Apache Tomcat information disclosure vulnerability - CVE-2008-2370

2013-03-25 00:00:00

K67352212 : Apache vulnerabilities CVE-2018-1286, CVE-2018-1294, CVE-2018-1316, CVE-2018-1319, and CVE-2018-1324

2018-09-04 00:00:00

packetstorm

tomcat-traverse.txt

2008-08-13 00:00:00

Oracle Containers For Java Traversal

2009-01-21 00:00:00

Apache Tomcat UTF-8 Directory Traversal

2010-07-28 00:00:00

checkpoint_advisories

Preemptive Protection against Apache Tomcat allowLinking URIencoding Directory Traversal Vulnerability

2008-08-19 00:00:00

Apache Tomcat URIencoding Directory Traversal (CVE-2007-0450; CVE-2008-2938)

2009-11-01 00:00:00

dsquare

Apache Tomcat File Disclosure

2012-02-01 00:00:00

DSquare Exploit Pack: D2SEC_TOMCAT_UTF8

2008-08-13 00:41:00

exploitdb

Apache Tomcat 6.0.15 - Cookie Quote Handling Remote Information Disclosure

2008-02-09 00:00:00

Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal (PoC)

2008-08-11 00:00:00

toutvirtual virtualiq pro 3.2 - Multiple Vulnerabilities

2009-11-07 00:00:00

jvn

JVN#09470767 Apache Tomcat fails to properly handle cookie value

2008-02-12 00:00:00

altlinux

Security fix for the ALT Linux 5 package tomcat5 version 0:5.5.25-alt1_1.1jpp5.0

2007-11-30 00:00:00

vmware

VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27

2009-02-23 00:00:00

VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27

2009-02-23 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.969 High

EPSS

Percentile

99.6%

JSON

Related for ATLASSIAN:CONFSERVER-10445

atlassian1 seebug8 redhat10 veracode5 ubuntucve5 cve6 osv9 prion6 github6 openvas41 nessus45 centos2 oraclelinux2 debian2 securityvulns13 fedora7 exploitpack3 tomcat8 cert2 f53 packetstorm4 checkpoint_advisories2 dsquare1 d21 exploitdb3 jvn1 altlinux1 vmware2