118 matches found
USN-1359-1: Tomcat vulnerabilities
It was discovered that Tomcat incorrectly performed certain caching and recycling operations. A remote attacker could use this flaw to obtain read access to IP address and HTTP header information in certain cases. This issue only applied to Ubuntu 11.10. CVE-2011-3375 It was discovered that Tomca...
Debian Security Advisory DSA 2401-1 (tomcat6)
The remote host is missing an update to tomcat6 announced via advisory DSA 2401-1. OpenVAS Vulnerability Test $Id: deb24011.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2401-1 tomcat6 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
SuSE 10 Security Update : tomcat5 (ZYPP Patch Number 7933)
This security update for tomcat5 fixes a vulnerability to a hash collision attack which allows remote attackers to perform denial of service attacks. The issue is tracked as CVE-2011-4858. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
Important: Red Hat Security Advisory: jbossweb security update
Updated jbossweb packages that fix multiple security issues are now available for JBoss Enterprise Web Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS ba...
Apache Tomcat 5.x < 5.5.35 Hash Collision Denial of Service
According to its self-reported version number, the instance of Apache Tomcat 5.x listening on the remote host is prior to 5.5.35. It is, therefore, affected by a denial of service vulnerability. Large numbers of crafted form parameters can cause excessive CPU consumption due to hash collisions...
CVE-2011-4858
CVE-2011-4858 affects Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23. The issue arises from the Java hashCode() implementation allowing predictable hash collisions, enabling a remote attacker to exhaust CPU by sending many crafted parameters in a request (hash collisi...
CVE-2011-4858
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...
CVE-2011-4084
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4858. Reason: This candidate is a duplicate of CVE-2011-4858. Notes: All CVE users should reference CVE-2011-4858 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2011-4084
CVE-2011-4084 is rejected/not used; reference CVE-2011-4858.
CVE-2010-4858
Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. dot dot in the showlang parameter...
CVE-2010-4858
CVE-2010-4858 is corroborated by multiple connected sources as a local file inclusion (LFI) vulnerability in DNET Live-Stats 0.8, specifically RC8. The issue arises from improper sanitization of user input, enabling directory traversal to access arbitrary files via the showlang parameter, or, per...
DNET Live-Stats 'team.rc5-72.php' Local File Include Vulnerability
DNET Live-Stats is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view files and execute local scripts in the context of the webserver process. This may aid in...
CVE-2009-4858
CVE-2009-4858 is an XSS vulnerability in Yahoo Answers Clone, specifically in questiondetail.php and exploitable via the questionid parameter. Remote attackers can inject arbitrary web script or HTML. The connected Red Hat, NVD, and other entries corroborate the same description; no product versi...
CVE-2005-4858
CVE-2005-4858 describes multiple XSS vulnerabilities in the script mimic2.cgi of the Mimic2/Mimicboard2 package (version 086 and earlier). The issue enables remote attackers to inject arbitrary web script or HTML through unspecified parameters tied to the (1) name, (2) title, and (3) comment fiel...
CVE-2006-4858
PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat comserverstat 0.4.4 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-4858
PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat comserverstat 0.4.4 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-4858
CVE-2006-4858 is a PHP remote file inclusion vulnerability in the install.serverstat.php file of the Serverstat (com_serverstat) 0.4.4 and earlier component for Mambo, allowing an attacker to execute arbitrary PHP code by supplying a URL in the mosConfig_absolute_path parameter. The provided docu...
