APACHE TOMCAT 6.0.35 SOFTWARE

remote IP address, HTTP headers) from the previous request to the next request. However, the request object was not recycled before being used for the next request. When certain errors occur that needed to be added to the access log, the access logging process triggers the re-population of the request object after it has been recycled.

These objects are not recycled at exactly the same time. Important: Information disclosure CVE-2011-3375įor performance reasons, information parsed from a request is often cached in two places: the internal request object and the internal processor object.

APACHE TOMCAT 6.0.35 SOFTWARE

Vulnerable Software & Versions: ( show all)Īpache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.The following problems were fixed in Apache Tomcat version 6.0.35: The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.

Display: Showing Vulnerable Dependencies (click to show all) DependencyĬpe:/a:apache_tomcat:apache_tomcat:6.0.44Ĭpe:/a:apache_software_foundation:tomcat:6.0.44Ĭom/sun/jna/win32-x86/jnidispatch.dll processor=x86 osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll processor=x86-64 osname=win32, com/sun/jna/w32ce-arm/jnidispatch.dll processor=arm osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so processor=x86 osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so processor=x86-64 osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so processor=sparc osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so processor=sparcv9 osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a processor=ppc osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a processor=ppc64 osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so processor=ppc osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so processor=ppc64 osname=linux, com/sun/jna/linux-x86/libjnidispatch.so processor=x86 osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so processor=x86-64 osname=linux, com/sun/jna/linux-arm/libjnidispatch.so processor=arm osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so processor=ia64 osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so processor=x86 osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so processor=x86-64 osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so processor=x86 osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so processor=x86-64 osname=openbsd, com/sun/jna/darwin/libjnidispatch.jnilib osname=macosx processor=x86 processor=x86-64 processor=ppc

Apache tomcat 6.0.35