oval:org.mitre.oval:def:9101

Definition Id: oval:org.mitre.oval:def:9101

Oval ID:	oval:org.mitre.oval:def:9101
Title:	Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.
Description:	Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0580	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2

Definition Id: oval:org.mitre.oval:def:15802

Oval ID:	oval:org.mitre.oval:def:15802
Title:	The operating system installed on the system is CentOS Linux 5.x
Description:	The operating system installed on the system is CentOS Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:5	Version:	7
Platform(s):	CentOS Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:9101

Definition Id: oval:org.mitre.oval:def:15459

Oval ID:	oval:org.mitre.oval:def:15459
Title:	Oracle Linux 5.x
Description:	The operating system installed on the system is Oracle Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:5	Version:	7
Platform(s):	Oracle Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:9101

Definition Id: oval:org.mitre.oval:def:11414

Oval ID:	oval:org.mitre.oval:def:11414
Title:	The operating system installed on the system is Red Hat Enterprise Linux 5
Description:	The operating system installed on the system is Red Hat Enterprise Linux 5.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:5	Version:	7
Platform(s):	Red Hat Enterprise Linux 5	Product(s):
Definition Synopsis:
Red Hat Enterprise 5 is installed
Referenced By:
oval:org.mitre.oval:def:9101

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0254s

Facebook rss twitter linkedin mail