Security Advisory SA27267 - HP Tru64 Internet Express update for Apache Tomcat

Overview

Advisories

Research

Forums

Create Profile

Our Commitment

Database

Advisories by Product

Advisories by Vendor

Terminology

Report Vulnerability

Insecure Library Loading

Secunia Advisory SA27267

HP Tru64 Internet Express update for Apache Tomcat

Secunia Advisory

SA27267

Release Date

2007-10-17

Popularity

8,286 views

Comments

0 comments

Criticality level

Less critical

Impact

Cross Site Scripting
Exposure of sensitive information

Where

From remote

Authentication level

This information is available to Secunia VIM customers

Report reliability

This information is available to Secunia VIM customers

Solution Status

Vendor Workaround

Systems affected

This information is available to Secunia VIM customers

Approve distribution

This information is available to Secunia VIM customers

Software:

HP Internet Express 6.x

Secunia CVSS Score

This information is available to Secunia VIM Customers

CVE Reference(s)

CVE-2007-3382 CVSS score available to Secunia VIM customers
CVE-2007-3385 CVSS score available to Secunia VIM customers
CVE-2007-3386 CVSS score available to Secunia VIM customers

Description

HP has issued an update for Apache Tomcat. This fixes some vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information or conduct cross-site scripting attacks.

For more information:
SA26465
SA26466

The vulnerabilities are reported in the following versions:
Tru64 UNIX running Tomcat v5.5.10 (supplied by Internet Express v6.5)
Tru64 UNIX running Tomcat v5.5.17 (supplied by Internet Express v6.6)
Tru64 UNIX running Tomcat v5.5.23 (supplied by Internet Express v6.7)

Solution
The vendor has released ERPs.
Further details available to Secunia VIM customers

Original Advisory
HPSBTU02276 SSRT071472:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers

Do you have additional information related to this advisory?

Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com

Subject: HP Tru64 Internet Express update for Apache Tomcat

No posts yet

Secunia Advisory SA27267

HP Tru64 Internet Express update for Apache Tomcat

Do you have additional information related to this advisory?

You must be logged in to post a comment.

Secunia Customer Login

Not a customer already?