JK Status Manager Information Disclosure

It is possible to obtain an overview of the remote Apache Tomcat Connectors configuration. By accessing this overview page; a remote, unauthenticated attacker can discover a large amount of information about the remote web server, including : - The IP address of the host. - The version of the...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.2 security update for Tomcat 7

An update is now available for Red Hat JBoss Enterprise Web Server 2 for RHEL 6 and Red Hat JBoss Enterprise Web Server 2 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 7 : JBoss Web Server (RHSA-2016:1088)

Red Hat JBoss Web Server 3.0.3 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

Apache Tomcat Security Manager Information Disclosure Vulnerability

Apache Tomcat is a popular open source JSP application server program. Apache Tomcat Security Manager has an information disclosure vulnerability in the implementation of the StatusManagerServlet, which allows attackers to exploit this vulnerability to obtain sensitive information...

Heap overflow

Heap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in ICQ 6.0 build 6043 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted personal status message...

CVE-2008-1920

CVE-2008-1920 describes a heap-based buffer overflow in the boxelyRenderer module of the Personal Status Manager feature in ICQ 6.0 build 6043. The vulnerability allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted personal status message. The core ...

EUVD-2008-1920

Heap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in ICQ 6.0 build 6043 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted personal status message...