ByteOS Network

CVE Vulnerability Details :

CVE-2008-5515

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-16 Jun, 2009 | 20:26

Updated At-07 Aug, 2024 | 10:56

▼CVE Numbering Authority (CNA)

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://tomcat.apache.org/security-4.html	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=127420533226623&w=2	vendor-advisory x_refsource_HP
http://secunia.com/advisories/39317	third-party-advisory x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDVSA-2009:138	vendor-advisory x_refsource_MANDRIVA
http://www.vupen.com/english/advisories/2009/1535	vdb-entry x_refsource_VUPEN
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html	vendor-advisory x_refsource_FEDORA
http://www.debian.org/security/2011/dsa-2207	vendor-advisory x_refsource_DEBIAN
http://jvn.jp/en/jp/JVN63832775/index.html	third-party-advisory x_refsource_JVN
http://marc.info/?l=bugtraq&m=136485229118404&w=2	vendor-advisory x_refsource_HP
http://secunia.com/advisories/37460	third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2010/3056	vdb-entry x_refsource_VUPEN
http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM
http://secunia.com/advisories/35788	third-party-advisory x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=127420533226623&w=2	vendor-advisory x_refsource_HP
http://www.securityfocus.com/archive/1/504202/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html	vendor-advisory x_refsource_APPLE
http://www.securityfocus.com/bid/35263	vdb-entry x_refsource_BID
http://www.vupen.com/english/advisories/2009/1520	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/44183	third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/1856	vdb-entry x_refsource_VUPEN
http://www.securityfocus.com/archive/1/504170/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://www.mandriva.com/security/advisories?name=MDVSA-2010:176	vendor-advisory x_refsource_MANDRIVA
http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://secunia.com/advisories/42368	third-party-advisory x_refsource_SECUNIA
http://tomcat.apache.org/security-6.html	x_refsource_CONFIRM
http://secunia.com/advisories/35393	third-party-advisory x_refsource_SECUNIA
http://support.apple.com/kb/HT4077	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html	vendor-advisory x_refsource_SUSE
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html	vendor-advisory x_refsource_FEDORA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6445	vdb-entry signature x_refsource_OVAL
http://secunia.com/advisories/35685	third-party-advisory x_refsource_SECUNIA
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html	vendor-advisory x_refsource_FEDORA
http://tomcat.apache.org/security-5.html	x_refsource_CONFIRM
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory x_refsource_SUSE
http://marc.info/?l=bugtraq&m=129070310906557&w=2	vendor-advisory x_refsource_HP
http://marc.info/?l=bugtraq&m=136485229118404&w=2	vendor-advisory x_refsource_HP
http://www.mandriva.com/security/advisories?name=MDVSA-2009:136	vendor-advisory x_refsource_MANDRIVA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1	vendor-advisory x_refsource_SUNALERT
http://marc.info/?l=bugtraq&m=129070310906557&w=2	vendor-advisory x_refsource_HP
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10422	vdb-entry signature x_refsource_OVAL
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19452	vdb-entry signature x_refsource_OVAL
http://www.vupen.com/english/advisories/2009/3316	vdb-entry x_refsource_VUPEN
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST

Hyperlink: http://tomcat.apache.org/security-4.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://marc.info/?l=bugtraq&m=127420533226623&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://secunia.com/advisories/39317

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:138

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://www.vupen.com/english/advisories/2009/1535

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.debian.org/security/2011/dsa-2207

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://jvn.jp/en/jp/JVN63832775/index.html

Resource:

third-party-advisory

x_refsource_JVN

Hyperlink: http://marc.info/?l=bugtraq&m=136485229118404&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://secunia.com/advisories/37460

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2010/3056

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/35788

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://marc.info/?l=bugtraq&m=127420533226623&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://www.securityfocus.com/archive/1/504202/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://www.securityfocus.com/bid/35263

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.vupen.com/english/advisories/2009/1520

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/44183

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2009/1856

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.securityfocus.com/archive/1/504170/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:176

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://www.securityfocus.com/archive/1/507985/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://secunia.com/advisories/42368

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://tomcat.apache.org/security-6.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/35393

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://support.apple.com/kb/HT4077

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6445

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://secunia.com/advisories/35685

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://tomcat.apache.org/security-5.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://marc.info/?l=bugtraq&m=129070310906557&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://marc.info/?l=bugtraq&m=136485229118404&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:136

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1

Resource:

vendor-advisory

x_refsource_SUNALERT

Hyperlink: http://marc.info/?l=bugtraq&m=129070310906557&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10422

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19452

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.vupen.com/english/advisories/2009/3316

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://tomcat.apache.org/security-4.html	x_refsource_CONFIRM x_transferred
http://marc.info/?l=bugtraq&m=127420533226623&w=2	vendor-advisory x_refsource_HP x_transferred
http://secunia.com/advisories/39317	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2009:138	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.vupen.com/english/advisories/2009/1535	vdb-entry x_refsource_VUPEN x_transferred
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.debian.org/security/2011/dsa-2207	vendor-advisory x_refsource_DEBIAN x_transferred
http://jvn.jp/en/jp/JVN63832775/index.html	third-party-advisory x_refsource_JVN x_transferred
http://marc.info/?l=bugtraq&m=136485229118404&w=2	vendor-advisory x_refsource_HP x_transferred
http://secunia.com/advisories/37460	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2010/3056	vdb-entry x_refsource_VUPEN x_transferred
http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/35788	third-party-advisory x_refsource_SECUNIA x_transferred
http://marc.info/?l=bugtraq&m=127420533226623&w=2	vendor-advisory x_refsource_HP x_transferred
http://www.securityfocus.com/archive/1/504202/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.securityfocus.com/bid/35263	vdb-entry x_refsource_BID x_transferred
http://www.vupen.com/english/advisories/2009/1520	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/44183	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2009/1856	vdb-entry x_refsource_VUPEN x_transferred
http://www.securityfocus.com/archive/1/504170/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2010:176	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://secunia.com/advisories/42368	third-party-advisory x_refsource_SECUNIA x_transferred
http://tomcat.apache.org/security-6.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/35393	third-party-advisory x_refsource_SECUNIA x_transferred
http://support.apple.com/kb/HT4077	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html	vendor-advisory x_refsource_SUSE x_transferred
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html	vendor-advisory x_refsource_FEDORA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6445	vdb-entry signature x_refsource_OVAL x_transferred
http://secunia.com/advisories/35685	third-party-advisory x_refsource_SECUNIA x_transferred
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html	vendor-advisory x_refsource_FEDORA x_transferred
http://tomcat.apache.org/security-5.html	x_refsource_CONFIRM x_transferred
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory x_refsource_SUSE x_transferred
http://marc.info/?l=bugtraq&m=129070310906557&w=2	vendor-advisory x_refsource_HP x_transferred
http://marc.info/?l=bugtraq&m=136485229118404&w=2	vendor-advisory x_refsource_HP x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2009:136	vendor-advisory x_refsource_MANDRIVA x_transferred
http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1	vendor-advisory x_refsource_SUNALERT x_transferred
http://marc.info/?l=bugtraq&m=129070310906557&w=2	vendor-advisory x_refsource_HP x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10422	vdb-entry signature x_refsource_OVAL x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19452	vdb-entry signature x_refsource_OVAL x_transferred
http://www.vupen.com/english/advisories/2009/3316	vdb-entry x_refsource_VUPEN x_transferred
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E	mailing-list x_refsource_MLIST x_transferred

Hyperlink: http://tomcat.apache.org/security-4.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=127420533226623&w=2

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://secunia.com/advisories/39317

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:138

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/1535

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.debian.org/security/2011/dsa-2207

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://jvn.jp/en/jp/JVN63832775/index.html

Resource:

third-party-advisory

x_refsource_JVN

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=136485229118404&w=2

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://secunia.com/advisories/37460

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/3056

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/35788

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=127420533226623&w=2

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/504202/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://www.securityfocus.com/bid/35263

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/1520

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://secunia.com/advisories/44183

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/1856

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/504170/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:176

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/507985/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://secunia.com/advisories/42368

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://tomcat.apache.org/security-6.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/35393

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://support.apple.com/kb/HT4077

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6445

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://secunia.com/advisories/35685

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://tomcat.apache.org/security-5.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=129070310906557&w=2

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=136485229118404&w=2

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:136

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1

Resource:

vendor-advisory

x_refsource_SUNALERT

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=129070310906557&w=2

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10422

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19452

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/3316

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References