68 matches found
MGASA-2014-0148 Updated tomcat package fixes security vulnerabilities
Apache Tomcat 7.x before 7.0.47, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via 1 multiple...
Apache Tomcat 6.0.x < 6.0.35 Multiple Vulnerabilities
Binary data 6332.pasl...
Apache Tomcat 7.0.x < 7.0.12 Multiple Vulnerabilities
Binary data 800625.prm...
Apache Tomcat < 3.3.1a Directory Listing and File Disclosure
Binary data 1466.pasl...
Apache Tomcat 4.1.x < 4.1.40 / 5.5.x < 5.5.28 / 6.0.x < 6.0.20 Multiple Vulnerabilities
Binary data 5044.pasl...
Apache Tomcat Directory Listing and File Disclosure
Apache Tomcat prior to 3.3.1a is affected by a directory listing and file disclosure vulnerability. By requesting URLs containing a null character, remote attackers can list directories even when an index.html or other file is present or obtain unprocessed source code for a JSP file. Also note...
wp-02-0008: Apache Tomcat Cross Site Scripting
Westpoint Security Advisory Title: Apache Tomcat Cross Site Scripting Risk Rating: Low Software: Apache Tomcat v4.0.3 Platforms: WinNT, Win2k, Linux Vendor URL: jakarta.apache.org Author: Matt Moore [email protected] Date: 10th July 2002 Advisory ID: wp-02-0008 Overview: ========= Apache Tomc...