oval:org.mitre.oval:def:10499

Definition Id: oval:org.mitre.oval:def:10499

Oval ID:	oval:org.mitre.oval:def:10499
Title:	Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Description:	Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2005-2090	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5 AND tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5 AND tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5 AND jakarta-commons-modeler is earlier than 0:1.1-8jpp.1.0.2.el5 AND tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.1.0.3.el5 AND jakarta-commons-modeler-javadoc is earlier than 0:1.1-8jpp.1.0.2.el5 AND tomcat5-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5 AND tomcat5 is earlier than 0:5.5.23-0jpp.1.0.3.el5 AND tomcat5-jasper is earlier than 0:5.5.23-0jpp.1.0.3.el5 AND tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.1.0.3.el5 AND tomcat5-server-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5 AND tomcat5-common-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5 AND tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5

Definition Id: oval:org.mitre.oval:def:15802

Oval ID:	oval:org.mitre.oval:def:15802
Title:	The operating system installed on the system is CentOS Linux 5.x
Description:	The operating system installed on the system is CentOS Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:5	Version:	7
Platform(s):	CentOS Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:10499

Definition Id: oval:org.mitre.oval:def:15459

Oval ID:	oval:org.mitre.oval:def:15459
Title:	Oracle Linux 5.x
Description:	The operating system installed on the system is Oracle Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:5	Version:	7
Platform(s):	Oracle Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:10499

Definition Id: oval:org.mitre.oval:def:11414

Oval ID:	oval:org.mitre.oval:def:11414
Title:	The operating system installed on the system is Red Hat Enterprise Linux 5
Description:	The operating system installed on the system is Red Hat Enterprise Linux 5.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:5	Version:	7
Platform(s):	Red Hat Enterprise Linux 5	Product(s):
Definition Synopsis:
Red Hat Enterprise 5 is installed
Referenced By:
oval:org.mitre.oval:def:10499

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0163s

Facebook rss twitter linkedin mail