ByteOS Network

Vulnerability Details :

CVE-2007-2449

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-14 Jun, 2007 | 23:00

Updated At-07 Aug, 2024 | 13:42

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:14 Jun, 2007 | 23:00

Updated At:07 Aug, 2024 | 13:42

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://tomcat.apache.org/security-4.html	x_refsource_CONFIRM
http://support.apple.com/kb/HT2163	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2008-0630.html	vendor-advisory x_refsource_REDHAT
http://www.vupen.com/english/advisories/2008/1981/references	vdb-entry x_refsource_VUPEN
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html	vendor-advisory x_refsource_FEDORA
http://www.securityfocus.com/bid/24476	vdb-entry x_refsource_BID
http://secunia.com/advisories/31493	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/471351/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://securityreason.com/securityalert/2804	third-party-advisory x_refsource_SREASON
http://www.redhat.com/support/errata/RHSA-2007-0569.html	vendor-advisory x_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilities/34869	vdb-entry x_refsource_XF
http://www.securityfocus.com/archive/1/500412/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://www.securitytracker.com/id?1018245	vdb-entry x_refsource_SECTRACK
http://secunia.com/advisories/33668	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/29392	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/500396/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html	vendor-advisory x_refsource_SUSE
http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html	vendor-advisory x_refsource_APPLE
http://www.vupen.com/english/advisories/2009/0233	vdb-entry x_refsource_VUPEN
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html	vendor-advisory x_refsource_SUSE
http://tomcat.apache.org/security-6.html	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/3386	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/30802	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/27037	third-party-advisory x_refsource_SECUNIA
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	vendor-advisory x_refsource_HP
http://secunia.com/advisories/27727	third-party-advisory x_refsource_SECUNIA
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	vendor-advisory x_refsource_HP
http://tomcat.apache.org/security-5.html	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2008-0261.html	vendor-advisory x_refsource_REDHAT
http://osvdb.org/36080	vdb-entry x_refsource_OSVDB
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10578	vdb-entry signature x_refsource_OVAL
http://secunia.com/advisories/26076	third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/2213	vdb-entry x_refsource_VUPEN
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx	x_refsource_CONFIRM
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDKSA-2007:241	vendor-advisory x_refsource_MANDRIVA
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST

Hyperlink: http://tomcat.apache.org/security-4.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://support.apple.com/kb/HT2163

Resource:

x_refsource_CONFIRM

Hyperlink: http://rhn.redhat.com/errata/RHSA-2008-0630.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.vupen.com/english/advisories/2008/1981/references

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.securityfocus.com/bid/24476

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://secunia.com/advisories/31493

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/archive/1/471351/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://securityreason.com/securityalert/2804

Resource:

third-party-advisory

x_refsource_SREASON

Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0569.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/34869

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.securityfocus.com/archive/1/500412/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.securitytracker.com/id?1018245

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://secunia.com/advisories/33668

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/29392

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/archive/1/500396/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://www.vupen.com/english/advisories/2009/0233

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://tomcat.apache.org/security-6.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2007/3386

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/30802

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/27037

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://secunia.com/advisories/27727

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://tomcat.apache.org/security-5.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0261.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://osvdb.org/36080

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10578

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://secunia.com/advisories/26076

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2007/2213

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx

Resource:

x_refsource_CONFIRM

Hyperlink: http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2007:241

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://tomcat.apache.org/security-4.html	x_refsource_CONFIRM x_transferred
http://support.apple.com/kb/HT2163	x_refsource_CONFIRM x_transferred
http://rhn.redhat.com/errata/RHSA-2008-0630.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.vupen.com/english/advisories/2008/1981/references	vdb-entry x_refsource_VUPEN x_transferred
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.securityfocus.com/bid/24476	vdb-entry x_refsource_BID x_transferred
http://secunia.com/advisories/31493	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/471351/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://securityreason.com/securityalert/2804	third-party-advisory x_refsource_SREASON x_transferred
http://www.redhat.com/support/errata/RHSA-2007-0569.html	vendor-advisory x_refsource_REDHAT x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/34869	vdb-entry x_refsource_XF x_transferred
http://www.securityfocus.com/archive/1/500412/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.securitytracker.com/id?1018245	vdb-entry x_refsource_SECTRACK x_transferred
http://secunia.com/advisories/33668	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/29392	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/500396/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.vupen.com/english/advisories/2009/0233	vdb-entry x_refsource_VUPEN x_transferred
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html	vendor-advisory x_refsource_SUSE x_transferred
http://tomcat.apache.org/security-6.html	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2007/3386	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/30802	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/27037	third-party-advisory x_refsource_SECUNIA x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	vendor-advisory x_refsource_HP x_transferred
http://secunia.com/advisories/27727	third-party-advisory x_refsource_SECUNIA x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	vendor-advisory x_refsource_HP x_transferred
http://tomcat.apache.org/security-5.html	x_refsource_CONFIRM x_transferred
http://www.redhat.com/support/errata/RHSA-2008-0261.html	vendor-advisory x_refsource_REDHAT x_transferred
http://osvdb.org/36080	vdb-entry x_refsource_OSVDB x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10578	vdb-entry signature x_refsource_OVAL x_transferred
http://secunia.com/advisories/26076	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2007/2213	vdb-entry x_refsource_VUPEN x_transferred
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx	x_refsource_CONFIRM x_transferred
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540	x_refsource_CONFIRM x_transferred
http://www.mandriva.com/security/advisories?name=MDKSA-2007:241	vendor-advisory x_refsource_MANDRIVA x_transferred
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred

Hyperlink: http://tomcat.apache.org/security-4.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://support.apple.com/kb/HT2163

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://rhn.redhat.com/errata/RHSA-2008-0630.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/1981/references

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.securityfocus.com/bid/24476

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://secunia.com/advisories/31493

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/471351/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://securityreason.com/securityalert/2804

Resource:

third-party-advisory

x_refsource_SREASON

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0569.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/34869

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/500412/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.securitytracker.com/id?1018245

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://secunia.com/advisories/33668

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/29392

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/500396/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/0233

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://tomcat.apache.org/security-6.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2007/3386

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://secunia.com/advisories/30802

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/27037

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://secunia.com/advisories/27727

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://tomcat.apache.org/security-5.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0261.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://osvdb.org/36080

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10578

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://secunia.com/advisories/26076

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2007/2213

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2007:241

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert@redhat.com

Published At:14 Jun, 2007 | 23:30

Updated At:23 Apr, 2026 | 00:35

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

The Apache Software Foundation

>>tomcat>>Versions up to 4.1.36(inclusive)

cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>4.0.0

cpe:2.3:a:apache:tomcat:4.0.0:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>4.0.1

cpe:2.3:a:apache:tomcat:4.0.1:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>4.0.2

cpe:2.3:a:apache:tomcat:4.0.2:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>4.0.3

cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>4.0.4

cpe:2.3:a:apache:tomcat:4.0.4:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>4.0.5

cpe:2.3:a:apache:tomcat:4.0.5:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.0

cpe:2.3:a:apache:tomcat:5.0.0:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.1

cpe:2.3:a:apache:tomcat:5.0.1:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.2

cpe:2.3:a:apache:tomcat:5.0.2:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.3

cpe:2.3:a:apache:tomcat:5.0.3:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.4

cpe:2.3:a:apache:tomcat:5.0.4:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.5

cpe:2.3:a:apache:tomcat:5.0.5:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.6

cpe:2.3:a:apache:tomcat:5.0.6:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.7

cpe:2.3:a:apache:tomcat:5.0.7:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.8

cpe:2.3:a:apache:tomcat:5.0.8:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.9

cpe:2.3:a:apache:tomcat:5.0.9:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.10

cpe:2.3:a:apache:tomcat:5.0.10:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.11

cpe:2.3:a:apache:tomcat:5.0.11:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.12

cpe:2.3:a:apache:tomcat:5.0.12:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.13

cpe:2.3:a:apache:tomcat:5.0.13:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.14

cpe:2.3:a:apache:tomcat:5.0.14:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.15

cpe:2.3:a:apache:tomcat:5.0.15:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.16

cpe:2.3:a:apache:tomcat:5.0.16:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.17

cpe:2.3:a:apache:tomcat:5.0.17:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.18

cpe:2.3:a:apache:tomcat:5.0.18:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.19

cpe:2.3:a:apache:tomcat:5.0.19:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.21

cpe:2.3:a:apache:tomcat:5.0.21:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.22

cpe:2.3:a:apache:tomcat:5.0.22:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.23

cpe:2.3:a:apache:tomcat:5.0.23:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.24

cpe:2.3:a:apache:tomcat:5.0.24:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.25

cpe:2.3:a:apache:tomcat:5.0.25:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.26

cpe:2.3:a:apache:tomcat:5.0.26:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.27

cpe:2.3:a:apache:tomcat:5.0.27:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.28

cpe:2.3:a:apache:tomcat:5.0.28:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.29

cpe:2.3:a:apache:tomcat:5.0.29:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.0.30

cpe:2.3:a:apache:tomcat:5.0.30:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.0

cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.1

cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.2

cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.3

cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.4

cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.5

cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.6

cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.7

cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.8

cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.9

cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.10

cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.11

cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*

The Apache Software Foundation

>>tomcat>>5.5.12

cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx	secalert@redhat.com	N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	secalert@redhat.com	N/A
http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html	secalert@redhat.com	N/A
http://osvdb.org/36080	secalert@redhat.com	N/A
http://rhn.redhat.com/errata/RHSA-2008-0630.html	secalert@redhat.com	N/A
http://secunia.com/advisories/26076	secalert@redhat.com	N/A
http://secunia.com/advisories/27037	secalert@redhat.com	N/A
http://secunia.com/advisories/27727	secalert@redhat.com	N/A
http://secunia.com/advisories/29392	secalert@redhat.com	N/A
http://secunia.com/advisories/30802	secalert@redhat.com	N/A
http://secunia.com/advisories/31493	secalert@redhat.com	N/A
http://secunia.com/advisories/33668	secalert@redhat.com	N/A
http://securityreason.com/securityalert/2804	secalert@redhat.com	N/A
http://support.apple.com/kb/HT2163	secalert@redhat.com	N/A
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540	secalert@redhat.com	N/A
http://tomcat.apache.org/security-4.html	secalert@redhat.com	N/A
http://tomcat.apache.org/security-5.html	secalert@redhat.com	N/A
http://tomcat.apache.org/security-6.html	secalert@redhat.com	Patch
http://www.mandriva.com/security/advisories?name=MDKSA-2007:241	secalert@redhat.com	N/A
http://www.redhat.com/support/errata/RHSA-2007-0569.html	secalert@redhat.com	N/A
http://www.redhat.com/support/errata/RHSA-2008-0261.html	secalert@redhat.com	N/A
http://www.securityfocus.com/archive/1/471351/100/0/threaded	secalert@redhat.com	N/A
http://www.securityfocus.com/archive/1/500396/100/0/threaded	secalert@redhat.com	N/A
http://www.securityfocus.com/archive/1/500412/100/0/threaded	secalert@redhat.com	N/A
http://www.securityfocus.com/bid/24476	secalert@redhat.com	N/A
http://www.securitytracker.com/id?1018245	secalert@redhat.com	N/A
http://www.vupen.com/english/advisories/2007/2213	secalert@redhat.com	N/A
http://www.vupen.com/english/advisories/2007/3386	secalert@redhat.com	N/A
http://www.vupen.com/english/advisories/2008/1981/references	secalert@redhat.com	N/A
http://www.vupen.com/english/advisories/2009/0233	secalert@redhat.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/34869	secalert@redhat.com	N/A
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E	secalert@redhat.com	N/A
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E	secalert@redhat.com	N/A
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E	secalert@redhat.com	N/A
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E	secalert@redhat.com	N/A
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E	secalert@redhat.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10578	secalert@redhat.com	N/A
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html	secalert@redhat.com	N/A
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx	af854a3a-2127-422b-91ae-364da2661108	N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/36080	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2008-0630.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/26076	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/27037	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/27727	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/29392	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/30802	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/31493	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/33668	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securityreason.com/securityalert/2804	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT2163	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540	af854a3a-2127-422b-91ae-364da2661108	N/A
http://tomcat.apache.org/security-4.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://tomcat.apache.org/security-5.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://tomcat.apache.org/security-6.html	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.mandriva.com/security/advisories?name=MDKSA-2007:241	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2007-0569.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2008-0261.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/471351/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/500396/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/500412/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/24476	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1018245	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2007/2213	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2007/3386	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2008/1981/references	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2009/0233	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/34869	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10578	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://osvdb.org/36080

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://rhn.redhat.com/errata/RHSA-2008-0630.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/26076

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/27037

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/27727

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/29392

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/30802

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/31493

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/33668

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://securityreason.com/securityalert/2804

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT2163

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://tomcat.apache.org/security-4.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://tomcat.apache.org/security-5.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://tomcat.apache.org/security-6.html

Source: secalert@redhat.com

Resource:

Patch

Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2007:241

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0569.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0261.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/471351/100/0/threaded

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/500396/100/0/threaded

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/500412/100/0/threaded

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/24476

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1018245

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2007/2213

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2007/3386

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/1981/references

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2009/0233

Source: secalert@redhat.com

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/34869

Source: secalert@redhat.com

Resource: N/A

Hyperlink: https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E

Source: secalert@redhat.com

Resource: N/A

Hyperlink: https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E

Source: secalert@redhat.com

Resource: N/A

Hyperlink: https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E

Source: secalert@redhat.com

Resource: N/A

Hyperlink: https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E

Source: secalert@redhat.com

Resource: N/A

Hyperlink: https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E

Source: secalert@redhat.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10578

Source: secalert@redhat.com

Resource: N/A

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx