oval:org.mitre.oval:def:19305

Definition Id: oval:org.mitre.oval:def:19305

Oval ID:	oval:org.mitre.oval:def:19305
Title:	HP-UX Running Apache, Remote Denial of Service (DoS), Execution of Arbitrary Code and other vulnerabilities
Description:	org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-3546	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02866 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxws22APCH32.APACHE version is less than B.2.2.15.15 AND hpuxws22APCH32.APACHE2 version is less than B.2.2.15.15 AND hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.15 AND hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.15 AND hpuxws22APCH32.MOD_JK version is less than B.2.2.15.15 AND hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.15 AND hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.15 AND hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.15 AND hpuxws22APCH32.PHP version is less than B.2.2.15.15 AND hpuxws22APCH32.PHP2 version is less than B.2.2.15.15 AND hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.15 AND hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.15 OR Criteria meets HP Security Bulletin HPSBUX02866 HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than C.6.0.36.01 OR Criteria meets HP Security Bulletin HPSBUX02866 HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than D.7.0.35.01

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0250s

Facebook rss twitter linkedin mail