oval:org.mitre.oval:def:6564

Definition Id: oval:org.mitre.oval:def:6564

Oval ID:	oval:org.mitre.oval:def:6564
Title:	HP-UX Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Unauthorized Access
Description:	Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0781	Version:	9
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02466 HP Release B.11.23 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.27.03 OR Criteria meets HP Security Bulletin HPSBUX02466 HP Release B.11.11 AND hpuxwsTOMCAT.TOMCAT version is less than B.5.5.27.03 OR Criteria meets HP Security Bulletin HPSBUX02466 HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.27.03