Oval Definition:	oval:org.mitre.oval:def:10077
Revision Date: 2013-04-29 Version: 12 Title: Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action. Description: Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2007-3386 Platform(s): CentOS Linux 5 Oracle Linux 5 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5 OR tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5 OR tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5 OR tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.3.0.2.el5 OR tomcat5-webapps is earlier than 0:5.5.23-0jpp.3.0.2.el5 OR tomcat5 is earlier than 0:5.5.23-0jpp.3.0.2.el5 OR tomcat5-jasper is earlier than 0:5.5.23-0jpp.3.0.2.el5 OR tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.3.0.2.el5 OR tomcat5-server-lib is earlier than 0:5.5.23-0jpp.3.0.2.el5 OR tomcat5-common-lib is earlier than 0:5.5.23-0jpp.3.0.2.el5 OR tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.3.0.2.el5
BACK