oval:org.mitre.oval:def:10577

Definition Id: oval:org.mitre.oval:def:10577

Oval ID:	oval:org.mitre.oval:def:10577
Title:	Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.
Description:	Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-2370	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1

Definition Id: oval:org.mitre.oval:def:15802

Oval ID:	oval:org.mitre.oval:def:15802
Title:	The operating system installed on the system is CentOS Linux 5.x
Description:	The operating system installed on the system is CentOS Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:5	Version:	7
Platform(s):	CentOS Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:10577

Definition Id: oval:org.mitre.oval:def:15459

Oval ID:	oval:org.mitre.oval:def:15459
Title:	Oracle Linux 5.x
Description:	The operating system installed on the system is Oracle Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:5	Version:	7
Platform(s):	Oracle Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:10577

Definition Id: oval:org.mitre.oval:def:11414

Oval ID:	oval:org.mitre.oval:def:11414
Title:	The operating system installed on the system is Red Hat Enterprise Linux 5
Description:	The operating system installed on the system is Red Hat Enterprise Linux 5.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:5	Version:	7
Platform(s):	Red Hat Enterprise Linux 5	Product(s):
Definition Synopsis:
Red Hat Enterprise 5 is installed
Referenced By:
oval:org.mitre.oval:def:10577

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0286s

Facebook rss twitter linkedin mail