Fixed in Apache Tomcat 4.1.36

Important: Information disclosure CVE-2005-2090 Requests with multiple content-length headers should be rejected as invalid. When multiple components firewalls, caches, proxies and Tomcat process a sequence of requests where one or more requests contain multiple content-length headers and several...

Javamail Multiple Information Disclosure Vulnerabilities

Javamail Multiple Information Disclosure Vulnerabilities May 25, 2005 Yangon, Myanmar. Vulnerable Systems: JavaMail API 1.3 JavaMail API 1.2 JavaMail API 1.1.3 Tested on Apache Tomcat/5.0.16 Possibly on all versions of Windows Failed to restrict to accessing other directory and files in...

CVE-2005-0808

Apache Tomcat before 5.x allows remote attackers to cause a denial of service application crash via a crafted AJP12 packet to TCP port 8007...

CVE-2005-0808

Apache Tomcat before 5.x allows remote attackers to cause a denial of service application crash via a crafted AJP12 packet to TCP port 8007...

CVE-2005-0808: Undefined Security Weakness

Apache Tomcat before 5.x allows remote attackers to cause a denial of service application crash via a crafted AJP12 packet to TCP port 8007...

Apache Tomcat JavaServer Page technology server AJP12 DoS

No description provided...

Apache Tomcat fails to properly handle certain requests

Vulnerability Note VU204710 Apache Tomcat fails to properly handle certain requests Overview Apache Tomcat does not properly handle certain types of requests allowing a remote attacker to cause a denial-of-service condition. I. Description Apache Tomcat is an implementation of the Java Servlet an...

Apache Tomcat AJP12 Protocol Malformed Packet Remote DoS

According to its self-reported version number, the version of Apache Tomcat running on the remote host is affected by a denial of service vulnerability due to a failure to handle malformed input. By submitting a specially crafted AJP12 request, an unauthenticated attacker can cause Tomcat to stop...

Apache Tomcat AJP12 Protocol Remote DoS

Binary data 2701.prm...

Apache Tomcat fails to properly handle certain requests

Overview Apache Tomcat does not properly handle certain types of requests allowing a remote attacker to cause a denial of service. Description Apache Tomcat is an implementation of the Java Servlet and JavaServer Page JSP technologies. Tomcat uses the AJP12 protocol on TCP 8007 by default for...

HP-UX PHSS_27921 : HPSBUX0209-222 Security Vulnerability in VVOS tomcat 3.2.x

s700800 11.04 Virtualvault 4.5 IWS Tomcat update : HP-UX 11.04 VVOS with Apache-Tomcat 3.2.x versions have a connector issue allowing potential unauthorized access to files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted fr...

jakarta556_xss.txt

Apache Jakarta Tomcat Cross Site Scripting Vulnerabilities =========================================================== Version ======== Apache Tomcat/5.5.6 running on Windows 2000 Other platforms may also be affected Exploiting =========== http://192.168.0.23:8080/manager/html/alert"Hallo"...

[SA13737] Apache Tomcat "Tomcat Manager" Cross-Site Scripting

TITLE: Apache Tomcat "Tomcat Manager" Cross-Site Scripting SECUNIA ADVISORY ID: SA13737 VERIFY ADVISORY: http://secunia.com/advisories/13737/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Apache Tomcat 5.x http://secunia.com/product/3571/ DESCRIPTION: Oliver...

Apache Tomcat crossite scripting

Tomcat Manager crossite scripting...

Fixed in Apache Tomcat 5.5.7, 5.0.SVN

Low: Cross-site scripting CVE-2005-4838 Various JSPs included as part of the JSP examples and the Tomcat Manager are susceptible to a cross-site scripting attack as they do not escape user provided data before including it in the returned page. Affects: 5.0.0-5.0.30, 5.5.0-5.5.6...

Debian DSA-395-1 : tomcat4 - incorrect input handling

Aldrin Martoq has discovered a denial of service DoS vulnerability in Apache Tomcat 4.0.x. Sending several non-HTTP requests to Tomcat's HTTP connector makes Tomcat reject further requests on this port until it is restarted. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

CVE-2002-0682

Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet...

CVE-2002-0682

Apache Tomcat - CVE-2002-0682: a cross-site scripting (XSS) flaw in the /servlet/ mapping allows remote attackers to execute script as other users by injecting script into a URL, triggered when an exception is thrown by the servlet. Affected version in the public record is Tomcat 4.0.3; vulnerabi...

CVE-2002-1394

Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148...

CVE-2002-1394

Apache Tomcat 4.x: vulnerability allows remote disclosure of server source code when using both the invoker servlet and the default servlet (Tomcat 4.0.5 and earlier). Root cause is exposure of server files through misconfigured/default servlet handling; impact is read access to source code and p...