oval:org.mitre.oval:def:10587

Definition Id: oval:org.mitre.oval:def:10587

Oval ID:	oval:org.mitre.oval:def:10587
Title:	Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.
Description:	Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-2938	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1 AND tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1

Definition Id: oval:org.mitre.oval:def:15802

Oval ID:	oval:org.mitre.oval:def:15802
Title:	The operating system installed on the system is CentOS Linux 5.x
Description:	The operating system installed on the system is CentOS Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:5	Version:	7
Platform(s):	CentOS Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:10587

Definition Id: oval:org.mitre.oval:def:15459

Oval ID:	oval:org.mitre.oval:def:15459
Title:	Oracle Linux 5.x
Description:	The operating system installed on the system is Oracle Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:5	Version:	7
Platform(s):	Oracle Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:10587

Definition Id: oval:org.mitre.oval:def:11414

Oval ID:	oval:org.mitre.oval:def:11414
Title:	The operating system installed on the system is Red Hat Enterprise Linux 5
Description:	The operating system installed on the system is Red Hat Enterprise Linux 5.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:5	Version:	7
Platform(s):	Red Hat Enterprise Linux 5	Product(s):
Definition Synopsis:
Red Hat Enterprise 5 is installed
Referenced By:
oval:org.mitre.oval:def:10587

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0275s

Facebook rss twitter linkedin mail