Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-1232
HistoryAug 04, 2008 - 12:00 a.m.

CVE-2008-1232

2008-08-0400:00:00
ubuntu.com
ubuntu.com
20

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.025 Low

EPSS

Percentile

89.9%

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through
4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote
attackers to inject arbitrary web script or HTML via a crafted string that
is used in the message argument to the HttpServletResponse.sendError
method.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchtomcat5.5< 5.5.25-5ubuntu1.1UNKNOWN
ubuntu8.10noarchtomcat5.5< 5.5.26-3ubuntu1UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.025 Low

EPSS

Percentile

89.9%