Description

HP has issued an update for Tomcat Servlet Engine in HP-UX. This fixes some weaknesses, a security issue, and multiple vulnerabilities, which can be exploited by malicious, local users to disclose sensitive information, bypass certain security restrictions, and cause a DoS (Denial of Service) and by malicious people to conduct cross-site scripting attacks, disclose potentially sensitive information, bypass certain security restrictions, and cause a DoS (Denial of Service).

For more information:
SA43198
SA44981
SA45232
SA45641
SA45748

The weaknesses, security issue, and vulnerabilities are reported in HP-UX B.11.23 and B.11.31 running HP-UX Apache Web Server Suite v3.19 or prior.

Solution
Update to Web Server Suite v3.20.
Further details available to Secunia VIM customers

Original Advisory
HPSBUX02725 SSRT100627:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03090723

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers