Fixed in Apache Tomcat 10.1.52

Moderate: Incomplete OCSP verification checks CVE-2026-24734 When using an OCSP responder, Tomcat's FFM integration with OpenSSL did not complete verification or freshness checks on the OCSP response which could allow certificate revocation to be bypassed. Affects: 10.1.0-M7 to 10.1.51 This issue...

Fixed in Apache Tomcat 9.0.115

Moderate: Incomplete OCSP verification checks CVE-2026-24734 When using an OCSP responder, Tomcat's FFM integration with OpenSSL did not complete verification or freshness checks on the OCSP response which could allow certificate revocation to be bypassed. Affects: 9.0.83 to 9.0.114 This issue wa...

FFM (Freedom Fighting Mode) - Open Source Hacking Harness

FFM is a hacking harness that you can use during the post-exploitation phase of a red-teaming engagement. The idea of the tool was derived from a 2007 conference from @thegrugq. It was presented at SSTIC 2018 and the accompanying slide deck is available at this url. If you're not familiar with th...

CVE-2007-6519

Unspecified vulnerability in the File-on-File Mounting File System FFM in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows local users to cause a denial of service system crash via unspecified vectors...

CVE-2007-6519

The CVE concerns HP Tru64 UNIX, specifically the File-on-File Mounting File System (FFM) in versions 5.1B-4 and 5.1B-3. The vulnerability is described as unspecified and locally exploitable, causing a denial of service (system crash) via unspecified vectors. The connected documents do not provide...

[security bulletin] HPSBTU02300 SSRT071452 rev.1 - HP Tru64 UNIX running FFM, Local Denial of Service (Dos)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01310389 Version: 1 HPSBTU02300 SSRT071452 rev.1 - HP Tru64 UNIX running FFM, Local Denial of Service Dos NOTICE: The information in this Security Bulletin should be acted upon as soon as possibl...