9801 matches found
CVE-2002-2009: Undefined Security Weakness
Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by 1 +/, 2 /, 3 , and 4 %20/, which leaks the pathname in an error message...
CVE-2002-2006: Undefined Security Weakness
The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the 1 SnoopServlet or 2 TroubleShooter example servlets...
CVE-2002-1895
The vulnerability CVE-2002-1895 affects the Tomcat servlet engine in versions 3.3 and 4.0.4 when used with IIS and the ajp1.3 connector. Affected component: servlet engine; issue: remote attackers can trigger a denial of service (crash) by issuing a large sequence of HTTP GET requests for MS-DOS ...
CVE-2002-1895
The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service crash via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN...
CVE-2002-1895: Undefined Security Weakness
The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service crash via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN...
Fixed in Apache Tomcat 6.0.11
Moderate: Cross-site scripting CVE-2007-1355 The JSP and Servlet included in the sample application within the Tomcat documentation webapp did not escape user provided data before including it in the output. This enabled a XSS attack. These pages have been simplified not to use any user provided...
Fixed in Apache Tomcat 4.1.36
Important: Information disclosure CVE-2005-2090 Requests with multiple content-length headers should be rejected as invalid. When multiple components firewalls, caches, proxies and Tomcat process a sequence of requests where one or more requests contain multiple content-length headers and several...
Javamail Multiple Information Disclosure Vulnerabilities
Javamail Multiple Information Disclosure Vulnerabilities May 25, 2005 Yangon, Myanmar. Vulnerable Systems: JavaMail API 1.3 JavaMail API 1.2 JavaMail API 1.1.3 Tested on Apache Tomcat/5.0.16 Possibly on all versions of Windows Failed to restrict to accessing other directory and files in...
CVE-2005-0808
Apache Tomcat before 5.x allows remote attackers to cause a denial of service application crash via a crafted AJP12 packet to TCP port 8007...
CVE-2005-0808
Apache Tomcat before 5.x allows remote attackers to cause a denial of service application crash via a crafted AJP12 packet to TCP port 8007...
CVE-2005-0808: Undefined Security Weakness
Apache Tomcat before 5.x allows remote attackers to cause a denial of service application crash via a crafted AJP12 packet to TCP port 8007...
Apache Tomcat JavaServer Page technology server AJP12 DoS
No description provided...
Apache Tomcat fails to properly handle certain requests
Vulnerability Note VU204710 Apache Tomcat fails to properly handle certain requests Overview Apache Tomcat does not properly handle certain types of requests allowing a remote attacker to cause a denial-of-service condition. I. Description Apache Tomcat is an implementation of the Java Servlet an...
Apache Tomcat AJP12 Protocol Malformed Packet Remote DoS
According to its self-reported version number, the version of Apache Tomcat running on the remote host is affected by a denial of service vulnerability due to a failure to handle malformed input. By submitting a specially crafted AJP12 request, an unauthenticated attacker can cause Tomcat to stop...
Apache Tomcat AJP12 Protocol Remote DoS
Binary data 2701.prm...
Apache Tomcat fails to properly handle certain requests
Overview Apache Tomcat does not properly handle certain types of requests allowing a remote attacker to cause a denial of service. Description Apache Tomcat is an implementation of the Java Servlet and JavaServer Page JSP technologies. Tomcat uses the AJP12 protocol on TCP 8007 by default for...
HP-UX PHSS_27921 : HPSBUX0209-222 Security Vulnerability in VVOS tomcat 3.2.x
s700800 11.04 Virtualvault 4.5 IWS Tomcat update : HP-UX 11.04 VVOS with Apache-Tomcat 3.2.x versions have a connector issue allowing potential unauthorized access to files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted fr...
jakarta556_xss.txt
Apache Jakarta Tomcat Cross Site Scripting Vulnerabilities =========================================================== Version ======== Apache Tomcat/5.5.6 running on Windows 2000 Other platforms may also be affected Exploiting =========== http://192.168.0.23:8080/manager/html/alert"Hallo"...
[SA13737] Apache Tomcat "Tomcat Manager" Cross-Site Scripting
TITLE: Apache Tomcat "Tomcat Manager" Cross-Site Scripting SECUNIA ADVISORY ID: SA13737 VERIFY ADVISORY: http://secunia.com/advisories/13737/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Apache Tomcat 5.x http://secunia.com/product/3571/ DESCRIPTION: Oliver...