Oval Definition:	oval:org.mitre.oval:def:11534
Revision Date: 2013-04-29 Version: 12 Title: Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add. Description: Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-1947 Platform(s): CentOS Linux 5 Oracle Linux 5 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1 OR tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1 OR tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1 OR tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_2.1 OR tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1 OR tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_2.1 OR tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_2.1 OR tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_2.1 OR tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1 OR tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1 OR tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1
BACK