oval:org.mitre.oval:def:10417

Definition Id: oval:org.mitre.oval:def:10417

Oval ID:	oval:org.mitre.oval:def:10417
Title:	The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
Description:	The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-5342	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 AND tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 AND tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 AND tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 AND tomcat5-webapps is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 AND tomcat5 is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 AND tomcat5-jasper is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 AND tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 AND tomcat5-server-lib is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 AND tomcat5-common-lib is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 AND tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.3.0.3.el5_1

Definition Id: oval:org.mitre.oval:def:15802

Oval ID:	oval:org.mitre.oval:def:15802
Title:	The operating system installed on the system is CentOS Linux 5.x
Description:	The operating system installed on the system is CentOS Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:5	Version:	7
Platform(s):	CentOS Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:10417

Definition Id: oval:org.mitre.oval:def:15459

Oval ID:	oval:org.mitre.oval:def:15459
Title:	Oracle Linux 5.x
Description:	The operating system installed on the system is Oracle Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:5	Version:	7
Platform(s):	Oracle Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:10417

Definition Id: oval:org.mitre.oval:def:11414

Oval ID:	oval:org.mitre.oval:def:11414
Title:	The operating system installed on the system is Red Hat Enterprise Linux 5
Description:	The operating system installed on the system is Red Hat Enterprise Linux 5.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:5	Version:	7
Platform(s):	Red Hat Enterprise Linux 5	Product(s):
Definition Synopsis:
Red Hat Enterprise 5 is installed
Referenced By:
oval:org.mitre.oval:def:10417

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0413s

Facebook rss twitter linkedin mail