Lucene search

K
nessusTenable800613.PRM
HistoryFeb 11, 2011 - 12:00 a.m.

Apache Tomcat 5.5.x < 5.5.30 Multiple Vulnerabilities

2011-02-1100:00:00
Tenable
www.tenable.com
52

Versions of Tomcat 5.x earlier than 5.5.30 are potentially affected by multiple vulnerabilities :

  • The โ€˜WWW-Authenticateโ€™ HTTP header for BASIC and DIGEST authentcation may expose the local host name or IP address of the machine running Tomcat. (CVE-2010-1157)

  • Several flaws in the handling of the โ€˜Tansfer-Encodingโ€™ header could prevent the recycling of buffer. (CVE-2010-2227)

  • When running under a SecurityManager, it is possible for web applications to be granted read/write permissions to any area on the file system. (CVE-2010-3718)

Binary data 800613.prm