Apache Tomcat Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2009-0781: Apache Tomcat cross-site scripting vulnerability Severity: low Vendor: The Apache Software Foundation Versions Affected: Tomcat 6.0.0 to 6.0.18 Tomcat 5.5.0 to 5.5.27 Tomcat 4.1.0 to 4.1.39 Description: The calendar application in the...

Apache Tomcat POST数据信息泄漏漏洞

BUGTRAQ ID: 33913 CVE ID：CVE-2008-4308 CNCVE ID：CNCVE-20084308 Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 Apache Tomcat POST数据处理存在问题，远程攻击者可以利用漏洞获得敏感信息。 处理POST数据存在错误，可导致攻击者获得之前请求的POST内容信息，包括其他用户请求数据中的密码，会话ID和用户ID。 Fujitsu INTERSTAGE Studio Standard-J Edition 9.0 Fujitsu INTERSTAGE Studio Enterprise Editi...

Design/Logic Flaw

The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request...

CVE-2008-4308

The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request...

CVE-2008-4308

The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request...

CVE-2008-4308

CVE-2008-4308 affects Apache Tomcat 4.1.32–4.1.34 and 5.5.10–5.5.20. The root cause is improper handling in the doRead method, which does not return -1 to signal a certain error condition, allowing the possibility of POST data from one request being sent to another. The consequence is potential i...

CVE-2008-4308

The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request...

Apache Tomcat information disclosure vulnerability

Overview Apache Tomcat from The Apache Software Foundation contains an information disclosure vulnerability. Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page JSP technologies. Apache Tomcat contains a vulnerability which may result in...

JVN#66905322: Apache Tomcat information disclosure vulnerability

Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page JSP technologies. Apache Tomcat contains a vulnerability which may result in the disclosure of POSTed content from a previous request. Impact A remote attacker could possibly obtain user...

Apache Tomcat information leak

Under some conditions it's possible to retrieve data from previous POST request...

CVE-2008-4308: Exposure of Sensitive Information to an Unauthorized Actor

The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request...

[DSECRG-09-008] JOnAS(4.10.3) - Linked XSS Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-008 ------------------link to original advisory -------------------------- http://www.dsecrg.com/pages/vul/show.php?id=81 Application: JOnAS Java Open Application Server Versions Affected: JOnAS4.10.3 / Apache Tomcat 5.5.26 Vendor URL:...

Fixed in Apache Tomcat 4.1.35

Low: Information disclosure CVE-2008-4308 Bug 40771 may result in the disclosure of POSTed content from a previous request. For a vulnerability to exist, the content read from the input stream must be disclosed, eg via writing it to the response and committing the response, before the...

VMSA-2009-0002:VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27

VMSA-2009-0002.2 VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0002.2 VMware Security Advisory Synopsis: VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27 VMware Security Advisory...

Apache Tomcat multiple security vulnerabilities

Crossite scripting, information leak...

CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)

Title: CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities CA Advisory Reference: CA20090123-01 CA Advisory Date: 2009-01-23 Reported By: n/a Impact: Refer to the CVE identifiers for details. Summary: Multiple security risks exist in Apache Tomcat as included with CA Cohesion Application...

Apache Tomcat < 5.5.29 / 6.0.24

Binary data 800619.prm...

Apache Tomcat 5.5.x < 5.5.29 / 6.0.x < 6.0.24 WAR Deployment Multiple Vulnerabilities

Binary data 5327.pasl...

Mandrake Security Advisory MDVSA-2009:018 (tomcat5)

The remote host is missing an update to tomcat5 announced via advisory MDVSA-2009:018. OpenVAS Vulnerability Test $Id: mdksa2009018.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:018 tomcat5 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:018 (tomcat5)

The remote host is missing an update to tomcat5 announced via advisory MDVSA-2009:018. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...