Lucene search

K
nessusTenable800595.PRM
HistoryFeb 11, 2011 - 12:00 a.m.

Apache Tomcat 6.0.x < 6.0.28 Multiple Vulnerabilities

2011-02-1100:00:00
Tenable
www.tenable.com
11

Versions of Tomcat 6.x earlier than 6.0.28 are potentially affected by multiple vulnerabilities :

  • The โ€˜WWW-Authenticateโ€™ HTTP header for BASIC and DIGEST authentication could potentially expose the local host name or IP adddress of the machine running Tomcat. (CVE-2010-1157)

  • Several flaws in handling of the โ€˜Transfer-Encodingโ€™ header exist that could prevent the recycling of a buffer. (CVE-2010-2227)

Binary data 800595.prm