GHSA-5x5f-9r6q-q7mh
Apache Tomcat Sensitive Information Disclosure
At a glance
- Published
- Updated
- CVE
- CVE-2008-0002
Description
Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.apache.tomcat:tomcat | introduced 6.0.0, fixed 6.0.16 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2008-0002 ADVISORY
- https://github.com/apache/tomcat PACKAGE
- https://web.archive.org/web/20080214133036/http://secunia.com/advisories/28915 WEB
- https://web.archive.org/web/20080715062302/http://secunia.com/advisories/29711 WEB
- https://web.archive.org/web/20080724052339/http://secunia.com/advisories/28834 WEB
- https://web.archive.org/web/20081012021650/http://www.securityfocus.com/bid/27703 WEB
- https://web.archive.org/web/20081013050642/http://secunia.com/advisories/32222 WEB
- https://web.archive.org/web/20081120062646/http://securityreason.com/securityalert/3638 WEB
- https://web.archive.org/web/20081121133027/http://www.securityfocus.com/archive/1/487812/100/0/threaded WEB
- https://web.archive.org/web/20091125140215/http://secunia.com/advisories/37460 WEB
- https://web.archive.org/web/20120825080137/http://www.securityfocus.com/bid/31681 WEB
- https://web.archive.org/web/20140723000733/http://secunia.com/advisories/57126 WEB
- https://web.archive.org/web/20150621204350/http://www.securityfocus.com/archive/1/507985/100/0/threaded WEB
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html WEB
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html WEB
- http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html WEB
- http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html WEB
- http://marc.info/?l=bugtraq&m=139344343412337&w=2 WEB
- http://security.gentoo.org/glsa/glsa-200804-10.xml WEB
- http://support.apple.com/kb/HT3216 WEB
- http://tomcat.apache.org/security-6.html WEB
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |