8745 matches found
Apache Tomcat 5.5.x < 5.5.29 / 6.0.x < 6.0.24 WAR Deployment Multiple Vulnerabilities
Binary data 5327.pasl...
Mandrake Security Advisory MDVSA-2009:018 (tomcat5)
The remote host is missing an update to tomcat5 announced via advisory MDVSA-2009:018. OpenVAS Vulnerability Test $Id: mdksa2009018.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:018 tomcat5 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Mandrake Security Advisory MDVSA-2009:018 (tomcat5)
The remote host is missing an update to tomcat5 announced via advisory MDVSA-2009:018. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Tomcat UTF-8 Directory Traversal Vulnerability
This module tests whether a directory traversal vulnerability is present in versions of Apache Tomcat 4.1.0 - 4.1.37, 5.5.0 - 5.5.26 and 6.0.0 - 6.0.16 under specific and non-default installations. The connector must have allowLinking set to true and URIEncoding set to UTF-8. Furthermore, the...
[SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Update 2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2008-2938: Apache Tomcat information disclosure vulnerability - Update 2 Severity: Important Vendor: Multiple was The Apache Software Foundation Versions Affected: Various Description new information: This vulnerability was originally reported to...
tomcat: Cross-Site-Scripting enabled by sendError call
Cross-site scripting XSS vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method...
Low: Red Hat Security Advisory: tomcat security update for Red Hat Network Satellite Server
Updated tomcat packages that fix multiple security issues are now available for Red Hat Network Satellite Server. This update has been rated as having low security impact by the Red Hat Security Response Team. This update corrects several security vulnerabilities in the Tomcat component shipped a...
Apache Tomcat untime.getRuntime().exec() Privilege Escalation (win)
No description provided by source. %@ page import="java.util.,java.io."% % % %-- abysssec inc public material just upload this file with abysssec.jsp and execute your command your command will run as administrator . you can download sam file add user or do anything you want . note : please be...
Apache Tomcat (Windows) - runtime.getRuntime().exec() Local Privilege Escalation
Apache Tomcat Windows - runtime.getRuntime.exec Local Privilege Escalation Abysssec inc abysssec.com JSP vulnerability JSP Privilege Escalation Vulnerability PoC "; Process p = Runtime.getRuntime.execrequest.getParameter"cmd"; OutputStream os = p.getOutputStream; InputStream in = p.getInputStream...
Apache Tomcat runtime.getRuntime().exec() Privilege Escalation (win)
Exploit for unknown platform in category local exploits ==================================================================== Apache Tomcat runtime.getRuntime.exec Privilege Escalation win ==================================================================== Abysssec inc abysssec.com JSP...
Apache Tomcat (Windows) - 'runtime.getRuntime().exec()' Local Privilege Escalation
Abysssec inc abysssec.com JSP vulnerability JSP Privilege Escalation Vulnerability PoC "; Process p = Runtime.getRuntime.execrequest.getParameter"cmd"; OutputStream os = p.getOutputStream; InputStream in = p.getInputStream; DataInputStream dis = new DataInputStreamin; String disr = dis.readLine;...
Apache Tomcat runtime.getRuntime().exec() Privilege Escalation (win)
No description provided by source. %@ page import="java.util.,java.io."% % % %-- abysssec inc public material just upload this file with abysssec.jsp and execute your command your command will run as administrator . you can download sam file add user or do anything you want . note : please be...
Apache Tomcat Manager Common Administrative Credentials
Nessus was able to gain access to the Manager web application for the remote Tomcat server using a known set of credentials. A remote attacker can exploit this issue to install a malicious application on the affected server and run arbitrary code with Tomcat's privileges usually SYSTEM on Windows...
PR08-09: Unauthenticated File Retrieval on Sun Java System Identity Manager "ext" parameter
PR08-09: Unauthenticated File Retrieval on Sun Java System Identity Manager "ext" parameter Date Found: 25th April 2008 Vendor Contacted: 28th April 2008 Date Public: 10th November 2008 Severity: High Credits: Richard Brain of ProCheckUp Ltd www.procheckup.com. ProCheckUp thanks Sun for working...
Apache Tomcat RemoteFilterValve Security Bypass Vulnerability
Apache Tomcat Server is running on this host and that is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Apache Tomcat RemoteFilterValve绕过安全限制漏洞
BUGTRAQ ID: 31698br / CVECAN ID: CVE-2008-3271br / br / Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。br / br / Apache Tomcat在检查IP地址时存在同步问题，在极少的环境下，这可能允许非允许的IP地址绕过RemoteFilterValve过滤器值并访问受保护的内容。仅在使用调试器在两个线程之间强制特定的处理序列的情况下才可以利用这个漏洞。br / Apache Tomcat 5.5.0 Apache Tomcat 4.1.0 - 4.1.31 Apache ------...
Apache Tomcat 'RemoteFilterValve'安全绕过漏洞
BUGTRAQ ID: 31698 CVE ID：CVE-2008-3271 CNCVE ID：CNCVE-20083271 Apache Tomcat是一款流行的开放源码的JSP应用服务器程序。 Apache Tomcat处理'RemoteFilterValve'扩展存在安全绕过问题，远程攻击者可以利用漏洞绕过访问限制，获得敏感信息。 在使用RemoteAddrValve允许部分地址访问引擎时： Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="a.b.c.d"/...
CVE-2008-3271
Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a...
Cross site request forgery (csrf)
Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a...
CVE-2008-3271
CVE-2008-3271 affects Apache Tomcat 5.5.0 and Tomcat 4.1.0 through 4.1.31. The issue is a synchronization-related defect that allows a remote attacker to bypass IP address restrictions and obtain sensitive information when a request is processed concurrently with another in a different thread, re...