552 matches found
Design/Logic Flaw
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...
CVE-2011-2526
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...
CVE-2011-2526
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...
CVE-2011-2526: Improper Input Validation
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...
Oracle Java SE Multiple Unspecified Vulnerabilities 01 - June11 (Windows)
This host is installed with Oracle Java SE and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoraclejavamultunspecifiedvulnwin01jun11.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Multiple Unspecified Vulnerabilities 01 - June11 Windows Authors:...
CVE-2011-0872
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO...
Design/Logic Flaw
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO...
CVE-2011-0872
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO...
CVE-2011-0872
CVE-2011-0872 affects Oracle Java SE/JRE 6 Update 25 and earlier. The vulnerability lies in the NIO component and can impact availability via unknown vectors, exploitable remotely. The connected records reference this CVE among Java-related issues and indicate later updates/patches address multip...
PT-2011-2720
Name of the Vulnerable Software and Affected Versions Java SE 6 versions prior to Update 25 Description The issue affects the availability of the system, related to the NIO component in the Java Runtime Environment. Details about the vectors used for exploitation are not specified. Recommendation...
CVE-2011-0872
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO...
CVE-2011-0872: Undefined Security Weakness
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO...
tomcat: remote DoS via NIO connector
Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service OutOfMemoryError via a crafted request...
Important: Red Hat Security Advisory: tomcat6 security update
Updated tomcat6 packages that fix two security issues are now available for JBoss Enterprise Web Server 1.0. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
Debian Security Advisory DSA 2160-1 (tomcat6)
The remote host is missing an update to tomcat6 announced via advisory DSA 2160-1. OpenVAS Vulnerability Test $Id: deb21601.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2160-1 tomcat6 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
ActFax Server (LPD/LPR) Remote Buffer Overflow Exploit
Exploit for windows platform in category remote exploits !/usr/bin/perl Exploit Title: ActFax Server LPD/LPR Remote Buffer Overflow Exploit Date: Feb 15, 2011 Author: chap0 Software Link: http://www.actfax.com/download/actfaxsetupen.exe Version: Version 4.25, Build 0221 2010-02-11 Tested on:...
Apache Tomcat 7.0.0 < 7.0.8
The version of Tomcat installed on the remote host is prior to 7.0.8. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat7.0.8security-7 advisory. - Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for...
Debian DSA-2160-1 : tomcat6 - several vulnerabilities
Several vulnerabilities were discovered in the Tomcat Servlet and JSP engine : - CVE-2010-3718 It was discovered that the SecurityManager insufficiently restricted the working directory. - CVE-2011-0013 It was discovered that the HTML manager interface is affected by cross-site scripting. -...
