VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27

a. Update for VirtualCenter and ESX patch update Apache Tomcat version to 5.5.27Update for VirtualCenter and ESX patch update the Tomcat package to version 5.5.27 which addresses multiple security issues that existed in the previous version of Apache Tomcat. The Common Vulnerabilities and Exposur...

Fedora Update for tomcat5 FEDORA-2008-8113

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Low: Red Hat Security Advisory: tomcat security update for Red Hat Network Satellite Server

Updated tomcat packages that fix multiple security issues are now available for Red Hat Network Satellite Server. This update has been rated as having low security impact by the Red Hat Security Response Team. This update corrects several security vulnerabilities in the Tomcat component shipped a...

Fixed in Apache Tomcat 5.5.27

Low: Cross-site scripting CVE-2008-1232 The message argument of HttpServletResponse.sendError call is not only displayed on the error page, but is also used for the reason-phrase of HTTP response. This may include characters that are illegal in HTTP headers. It is possible for a specially crafted...

SOL9109 - Apache Tomcat cross-site scripting vulnerability CVE-2008-1947

Cross-site scripting XSS vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML through the name parameter the hostname attribute to host-manager/html/add. Information about this advisory is available at the...

Important: Red Hat Security Advisory: tomcat security update

Updated tomcat packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP...

tomcat security update

5.5.23-0jpp.7.el52.1 - add patch for CVE-2008-1232 Resolves: rhbz457727 - add patch for CVE-2008-1947 Resolves: rhbz449916 - add patch for CVE-2008-2370 Resolves: rhbz458634 - add patch for CVE-2008-2938 Resolves: rhbz456214...

Debian DSA-1593-1 : tomcat5.5 - missing input sanitising

It was discovered that the Host Manager web application performed insufficient input sanitising, which could lead to cross-site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

[SECURITY] [DSA 1593-1] New tomcat5.5 packages cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1593-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 09, 2008 http://www.debian.org/security/faq -...

CVE-2008-1947

CVE-2008-1947 is an XSS vulnerability in Apache Tomcat, affecting 5.5.9–5.5.26 and 6.0.0–6.0.16. It allows remote attackers to inject arbitrary web script or HTML via the name parameter (the hostname attribute) to host-manager/html/add. The connected documents confirm the affected product/version...

CVE-2007-1947

Affected software: Firebug extension for Mozilla Firefox (DOM templates used by console.log, domplates). Vulnerability: Cross-zone scripting via overwriting toString in anonymous functions within domplates, enabling bypass of zone restrictions and potential read of file:// URIs or code execution ...

CVE-2006-1947

CVE-2006-1947 affects NicPlex Plexum X5 and earlier. Vulnerable component: plexum.php; affected function/entry: the SQL queries that use the parameters (1) pagesize, (2) maxrec, and (3) startpos). Condition: remote attackers can trigger SQL injection, enabling arbitrary SQL execution. CVSS-derive...

CVE-2002-1947

Webmin 0.21–1.0 uses the same built-in SSL key across installations, allowing remote attackers to eavesdrop on or hijack SSL sessions. The root cause is the shared SSL key across deployments. No remediation or patch details are provided in the connected documents.

CVE-2005-1947

The vulnerability CVE-2005-1947 affects Invision Gallery versions prior to 1.3.1. A Cross-site request forgery (CSRF) allows remote attackers to delete albums and images as another user via links or IMG tags targeting the (1) albums or (2) delimg actions. Root cause is CSRF in the affected action...

CVE-2004-1947

The CVE-2004-1947 entry concerns the AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online. The vulnerability allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary c...

CVE-2004-1947

The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to 1 obtain sensitive information such as system drives and contents or 2 use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab...