Oval Definition:oval:com.ubuntu.xenial:def:201607620000000
Revision Date:2017-08-10Version:1
Title:CVE-2016-0762 on Ubuntu 16.04 LTS (xenial) - low.
Description:The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default configuration includes the LockOutRealm which makes exploitation of this vulnerability harder.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-0762
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND Package Information
  • tomcat6 package in xenial, is related to the CVE in some way and has been fixed (note: '6.0.45+dfsg-1').
  • OR tomcat7 package in xenial was vulnerable but has been fixed (note: '7.0.68-1ubuntu0.3').
  • OR tomcat8 package in xenial was vulnerable but has been fixed (note: '8.0.32-1ubuntu1.3').
    • BACK