Oval Definition:	oval:org.mitre.oval:def:9202
Revision Date: 2013-04-29 Version: 12 Title: Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag. Description: Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2007-5461 Platform(s): CentOS Linux 5 Oracle Linux 5 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 OR tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 OR tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 OR tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 OR tomcat5-webapps is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 OR tomcat5 is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 OR tomcat5-jasper is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 OR tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 OR tomcat5-server-lib is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 OR tomcat5-common-lib is earlier than 0:5.5.23-0jpp.3.0.3.el5_1 OR tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.3.0.3.el5_1
BACK