CVE-2011-2526

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...

CVE-2011-2526

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...

CVE-2011-2526

Removed by vendor...

[SECURITY] CVE-2011-1475 Apache Tomcat information disclosure

CVE-2011-1475 Apache Tomcat information disclosure Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Tomcat 7.0.0 to 7.0.11 - Earlier versions are not affected Description: Changes introduced to the HTTP BIO connector to support Servlet 3.0 asynchronous requests did...

CVE-2011-1475

The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for...

Design/Logic Flaw

The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for...

CVE-2011-1475

The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for...

CVE-2011-1475

CVE-2011-1475 affects Apache Tomcat 7.0.x prior to 7.0.12. The HTTP BIO connector mishandles HTTP pipelining, allowing remote attackers to read responses intended for other clients by examining HTTP packet data, due to a mix-up of responses for requests from different users. Impact is information...

CVE-2011-1475: Improper Input Validation

The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for...

Apache Tomcat 7.0.x < 7.0.12 Multiple Vulnerabilities

Binary data 5882.pasl...

PT-2011-3158

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.0.0 through 7.0.11 Description The issue arises from the HTTP BIO connector in Apache Tomcat not properly handling HTTP pipelining. This allows remote attackers to potentially read responses intended for other clients ...

CVE-2009-5058

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.5 services for Lotus Domino allows remote authenticated users to cause a denial of service daemon crash by deleting an item that is accessed through a connector, aka SPR RELS7LARKR...

CVE-2009-5059

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J...

Code injection

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J...

CVE-2009-5058

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.5 services for Lotus Domino allows remote authenticated users to cause a denial of service daemon crash by deleting an item that is accessed through a connector, aka SPR RELS7LARKR...

PT-2011-1320

Name of the Vulnerable Software and Affected Versions IBM Lotus Quickr version 8.1 before 8.1.0.10 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash. This can be achieved by checking out a document accessed through a connector...

PT-2011-1319

Name of the Vulnerable Software and Affected Versions IBM Lotus Quickr version 8.1 before 8.1.0.5 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash. This can be achieved by deleting an item that is accessed through a connector...

tomcat: remote DoS via NIO connector

Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service OutOfMemoryError via a crafted request...

Important: Red Hat Security Advisory: tomcat6 security update

Updated tomcat6 packages that fix two security issues are now available for JBoss Enterprise Web Server 1.0. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Debian Security Advisory DSA 2160-1 (tomcat6)

The remote host is missing an update to tomcat6 announced via advisory DSA 2160-1. OpenVAS Vulnerability Test $Id: deb21601.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2160-1 tomcat6 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...