Tomcat vulnerability

2010-08-2500:00:00

ubuntu.com

5.3 Medium

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.637 Medium

EPSS

Percentile

97.8%

JSON

Releases

Ubuntu 10.04
Ubuntu 9.10
Ubuntu 9.04

Packages

tomcat6 -

Details

It was discovered that Tomcat incorrectly handled invalid Transfer-Encoding
headers. A remote attacker could send specially crafted requests containing
invalid headers to the server and cause a denial of service, or possibly
obtain sensitive information from other requests.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchlibtomcat6-java< 6.0.20-2ubuntu2.2UNKNOWN
Ubuntu9.10noarchlibservlet2.5-java< 6.0.20-2ubuntu2.2UNKNOWN
Ubuntu9.10noarchlibservlet2.5-java-doc< 6.0.20-2ubuntu2.2UNKNOWN
Ubuntu9.10noarchtomcat6< 6.0.20-2ubuntu2.2UNKNOWN
Ubuntu9.10noarchtomcat6-admin< 6.0.20-2ubuntu2.2UNKNOWN
Ubuntu9.10noarchtomcat6-common< 6.0.20-2ubuntu2.2UNKNOWN
Ubuntu9.10noarchtomcat6-docs< 6.0.20-2ubuntu2.2UNKNOWN
Ubuntu9.10noarchtomcat6-examples< 6.0.20-2ubuntu2.2UNKNOWN
Ubuntu9.10noarchtomcat6-user< 6.0.20-2ubuntu2.2UNKNOWN
Ubuntu9.04noarchlibtomcat6-java< 6.0.18-0ubuntu6.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	libtomcat6-java	< 6.0.20-2ubuntu2.2	UNKNOWN
Ubuntu	9.10	noarch	libservlet2.5-java	< 6.0.20-2ubuntu2.2	UNKNOWN
Ubuntu	9.10	noarch	libservlet2.5-java-doc	< 6.0.20-2ubuntu2.2	UNKNOWN
Ubuntu	9.10	noarch	tomcat6	< 6.0.20-2ubuntu2.2	UNKNOWN
Ubuntu	9.10	noarch	tomcat6-admin	< 6.0.20-2ubuntu2.2	UNKNOWN
Ubuntu	9.10	noarch	tomcat6-common	< 6.0.20-2ubuntu2.2	UNKNOWN
Ubuntu	9.10	noarch	tomcat6-docs	< 6.0.20-2ubuntu2.2	UNKNOWN
Ubuntu	9.10	noarch	tomcat6-examples	< 6.0.20-2ubuntu2.2	UNKNOWN
Ubuntu	9.10	noarch	tomcat6-user	< 6.0.20-2ubuntu2.2	UNKNOWN
Ubuntu	9.04	noarch	libtomcat6-java	< 6.0.18-0ubuntu6.3	UNKNOWN