oval:org.mitre.oval:def:13802

Definition Id: oval:org.mitre.oval:def:13802

Oval ID:	oval:org.mitre.oval:def:13802
Title:	USN-1097-1 -- tomcat6 vulnerabilities
Description:	It was discovered that the Tomcat SecurityManager did not properly restrict the working directory. An attacker could use this flaw to read or write files outside of the intended working directory. It was discovered that Tomcat did not properly escape certain parameters in the Manager application which could result in browsers becoming vulnerable to cross-site scripting attacks when processing the output. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain. It was discovered that Tomcat incorrectly enforced the maxHttpHeaderSize limit in certain configurations. A remote attacker could use this flaw to cause Tomcat to consume all available memory, resulting in a denial of service
Family:	unix	Class:	patch
Reference(s):	USN-1097-1 CVE-2010-3718 CVE-2011-0013 CVE-2011-0534	Version:	5
Platform(s):	Ubuntu 10.10 Ubuntu 9.10 Ubuntu 10.04	Product(s):	tomcat6
Definition Synopsis:
Release section Ubuntu 10.10 is installed AND Installed architecture is all AND Packages section libservlet2.5-java DPKG is earlier than 6.0.28-2ubuntu1.2 AND libtomcat6-java DPKG is earlier than 6.0.28-2ubuntu1.2 AND tomcat6-docs DPKG is earlier than 6.0.28-2ubuntu1.2 AND libservlet2.5-java-doc DPKG is earlier than 6.0.28-2ubuntu1.2 AND tomcat6 DPKG is earlier than 6.0.28-2ubuntu1.2 AND tomcat6-admin DPKG is earlier than 6.0.28-2ubuntu1.2 AND tomcat6-common DPKG is earlier than 6.0.28-2ubuntu1.2 AND tomcat6-user DPKG is earlier than 6.0.28-2ubuntu1.2 AND tomcat6-examples DPKG is earlier than 6.0.28-2ubuntu1.2 OR Release section Ubuntu 9.10 is installed AND Installed architecture is all AND Packages section libservlet2.5-java DPKG is earlier than 6.0.20-2ubuntu2.4 AND libtomcat6-java DPKG is earlier than 6.0.20-2ubuntu2.4 AND tomcat6-docs DPKG is earlier than 6.0.20-2ubuntu2.4 AND libservlet2.5-java-doc DPKG is earlier than 6.0.20-2ubuntu2.4 AND tomcat6 DPKG is earlier than 6.0.20-2ubuntu2.4 AND tomcat6-admin DPKG is earlier than 6.0.20-2ubuntu2.4 AND tomcat6-common DPKG is earlier than 6.0.20-2ubuntu2.4 AND tomcat6-user DPKG is earlier than 6.0.20-2ubuntu2.4 AND tomcat6-examples DPKG is earlier than 6.0.20-2ubuntu2.4 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND Packages section libservlet2.5-java DPKG is earlier than 6.0.24-2ubuntu1.7 AND libtomcat6-java DPKG is earlier than 6.0.24-2ubuntu1.7 AND tomcat6-docs DPKG is earlier than 6.0.24-2ubuntu1.7 AND libservlet2.5-java-doc DPKG is earlier than 6.0.24-2ubuntu1.7 AND tomcat6 DPKG is earlier than 6.0.24-2ubuntu1.7 AND tomcat6-admin DPKG is earlier than 6.0.24-2ubuntu1.7 AND tomcat6-common DPKG is earlier than 6.0.24-2ubuntu1.7 AND tomcat6-user DPKG is earlier than 6.0.24-2ubuntu1.7 AND tomcat6-examples DPKG is earlier than 6.0.24-2ubuntu1.7

Definition Id: oval:org.mitre.oval:def:13089

Oval ID:	oval:org.mitre.oval:def:13089
Title:	Ubuntu 10.04 is installed
Description:	Ubuntu 10.04 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:canonical:ubuntu_linux:10.04	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):
Definition Synopsis:
Ubuntu 10.04 is installed
Referenced By:
oval:org.mitre.oval:def:13802

Definition Id: oval:org.mitre.oval:def:13134

Oval ID:	oval:org.mitre.oval:def:13134
Title:	Ubuntu 10.10 is installed
Description:	Ubuntu 10.10 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:10.10	Version:	3
Platform(s):	Ubuntu 10.10	Product(s):
Definition Synopsis:
Ubuntu 10.10 is installed
Referenced By:
oval:org.mitre.oval:def:13802

Definition Id: oval:org.mitre.oval:def:13079

Oval ID:	oval:org.mitre.oval:def:13079
Title:	Ubuntu 9.10 is installed
Description:	Ubuntu 9.10 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:canonical:ubuntu_linux:9.10	Version:	5
Platform(s):	Ubuntu 9.10	Product(s):
Definition Synopsis:
Ubuntu 9.10 is installed
Referenced By:
oval:org.mitre.oval:def:13802

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0489s

Facebook rss twitter linkedin mail