|
|
| |
|
| |
tomcat: multiple vulnerabilities
| Package(s): | tomcat6 |
CVE #(s): | CVE-2010-3718
CVE-2011-0013
CVE-2011-0534
|
| Created: | February 14, 2011 |
Updated: | October 20, 2011 |
| Description: |
From the Debian advisory:
It was discovered that the SecurityManager insufficiently restricted the working directory. (CVE-2010-3718)
It was discovered that the HTML manager interface is affected by cross-site scripting. (CVE-2011-0013)
It was discovered that NIO connector performs insufficient validation of the HTTP headers, which could lead to denial of service. (CVE-2011-0534)
|
| Alerts: |
|
( Log in to post comments)
|
|
|