Oval Definition:	oval:org.mitre.oval:def:10716
Revision Date: 2013-04-29 Version: 12 Title: Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application. Description: Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-0783 Platform(s): CentOS Linux 5 Oracle Linux 5 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2
BACK