CVE-2008-1232 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2008-1232
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1232

Description: Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/44155 SUSE http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html ST 1020622 SREASON http://securityreason.com/securityalert/4098 SAID Secunia Advisory: SA32266 Secunia Advisory: SA32120 Secunia Advisory: SA33797 Secunia Advisory: SA31982 Secunia Advisory: SA32222 Secunia Advisory: SA31865 Secunia Advisory: SA31891 Secunia Advisory: SA31639 Secunia Advisory: SA37460 Secunia Advisory: SA31379 Secunia Advisory: SA31381 Secunia Advisory: SA35474 Secunia Advisory: SA36108 Secunia Advisory: SA33999 Secunia Advisory: SA34013 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0864.html http://www.redhat.com/support/errata/RHSA-2008-0862.html http://www.redhat.com/support/errata/RHSA-2008-0648.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11181 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5985 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:188 HP http://marc.info/?l=bugtraq&m=123376588623823&w=2 FEDORA CONFIRM http://www.vmware.com/security/advisories/VMSA-2009-0016.html http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-02-ca-service-desk-tomcat-cross-site-scripting-vulnerability.aspx http://www.vmware.com/security/advisories/VMSA-2009-0002.html http://support.apple.com/kb/HT3216 http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209500 http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-4.html http://tomcat.apache.org/security-5.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/507985/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/505556/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/504351/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/495021/100/0/threaded BID 31681 30496 APPLE http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability