Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-2481HistoryAug 15, 2011 - 9:55 p.m.
CVE-2011-2481
2011-08-1521:55:00
Debian Security Bug Tracker
security-tracker.debian.org
8
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application. NOTE: this vulnerability exists because of a CVE-2009-0783 regression.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | tomcat7 | <Β 7.0.75-1 | tomcat7_7.0.75-1_all.deb |
Related
osv
osv
Apache Tomcat Allows Replacing of XML Parser
2022-05-17 02:44:28
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 03:18:15
prion
prion
Design/Logic Flaw
2011-08-15 21:55:00
Code injection
2009-06-05 16:00:00
cve
cve
CVE-2011-2481
2011-08-15 21:55:00
CVE-2009-0783
2009-06-05 16:00:00
ubuntucve
ubuntucve
CVE-2011-2481
2011-08-15 00:00:00
CVE-2009-0783
2009-06-05 00:00:00
github
github
Apache Tomcat Allows Replacing of XML Parser
2022-05-17 02:44:28
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 03:18:15
tomcat
tomcat
Fixed in Apache Tomcat 7.0.19
2011-07-19 00:00:00
Fixed in Apache Tomcat 4.1.40
2008-12-12 00:00:00
Fixed in Apache Tomcat 6.0.20
2009-06-03 00:00:00
seebug
seebug
Apache TomcatδΏ‘ζ―ζ³ι²ζΌζ΄(CVE-2011-2481)
2011-08-17 00:00:00
Apache Tomcat XML解ζε¨ιζζζδ»Άθ―»εζΌζ΄
2009-06-09 00:00:00
openvas
openvas
Apache Tomcat Information Disclosure Vulnerability
2011-08-16 00:00:00
Apache Tomcat Multiple Vulnerabilities (Jun 2009)
2009-06-16 00:00:00
Mandrake Security Advisory MDVSA-2009:138 (tomcat5)
2009-06-30 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2018-11-21 06:37:28
securityvulns
securityvulns
[SECURITY] CVE-2009-0783 Apache Tomcat Information disclosure
2009-06-05 00:00:00
Apache Tomcat security vulnerabilities
2011-08-17 00:00:00
Apache Tomcat multiple security vulnerabilities
2009-06-14 00:00:00
nessus
nessus
Apache Tomcat Cross-Application File Manipulation
2009-06-22 00:00:00
Apache Tomcat 7.0.x < 7.0.17 Multiple Vulnerabilities
2011-08-01 00:00:00
Apache Tomcat 7.x < 7.0.17 Multiple Vulnerabilities
2011-08-03 00:00:00
redhat
redhat
(RHSA-2009:1617) Low: tomcat security update for Red Hat Network Satellite Server
2009-11-30 00:00:00
(RHSA-2009:1145) Important: JBoss Enterprise Application Platform 4.3.0.CP05 update
2009-07-06 00:00:00
(RHSA-2009:1506) Important: tomcat6 security update
2009-10-14 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: tomcat6-6.0.20-1.fc11
2009-11-27 21:36:22
[SECURITY] Fedora 12 Update: tomcat6-6.0.20-1.fc12
2009-11-27 21:50:49
[SECURITY] Fedora 10 Update: tomcat6-6.0.20-1.fc10
2009-11-27 21:56:48
ubuntu
ubuntu
Tomcat vulnerabilities
2009-06-15 00:00:00
oraclelinux
oraclelinux
tomcat security update
2009-07-21 00:00:00
centos
centos
tomcat5 security update
2009-07-29 17:30:22
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
ibm
ibm
vmware
vmware
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
Related for DEBIANCVE:CVE-2011-2481