Detections
Analytics
Apache Tomcat < 4.1.40 / 5.5.28 / 6.0.20 Multiple Vulnerabilities
medium Log Correlation Engine Plugin ID 800598
Synopsis
The remote web server is affected by multiple vulnerabilities.Description
The version of Apache Tomcat installed on the remote host is affected by a multiple vulnerabilities :- A username enumeration vulnerability exists when FORM based authentication with either the MemoryRealm, DataSourceRealm, or JDBCRealm is used. (CVE-2009-0580)
- A denial of service exists if Tomcat receives a request with invalid headers via the Java AJP connector. (CVE-2009-0033)
- A remote information-disclosure vulnerability exists in the 'RequestDispatcher' can be exploited to gain access to content in the 'WEB-INF' directory. (CVE-2008-5515)
- It is possible for a web application to replace the XML parser used by Tomcat to process 'web.xml', 'context.xml', and 'tld' files.
Solution
Upgrade to Apache Tomcat 4.1.40 / 5.5.28 / 6.0.20See Also
Plugin Details
Severity: Medium
ID: 800598
Family: Web Servers
Exploitable With
CANVAS (D2ExploitPack)
Reference Information
CVE: CVE-2008-5515, CVE-2009-0033, CVE-2009-0580, CVE-2009-0783