A security issue has been reported in Apache Tomcat, which potentially can be exploited by malicious people to bypass certain security restrictions.

The security issue is caused due to a synchronisation problem when checking IP addresses and can be exploited to bypass a filter valve that extends "RemoteFilterValve" and potentially gain access to protected contexts.

The security issue affects version 5.5.0 and versions 4.1.0 through 4.1.31.

Solution
Apache Tomcat 4.x:
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Kenichi Tsukamoto of Fujitsu Limited.

Original Advisory
Apache:
http://tomcat.apache.org/security-4.html
http://tomcat.apache.org/security-5.html
https://issues.apache.org/bugzilla/show_bug.cgi?id=25835

JVN:
http://jvn.jp/en/jp/JVN30732239/index.html

Deep Links
Links available to Secunia VIM customers