Apache Tomcat Manager and Host Manager Upload Script Cross-Site Scripting Vulnerability

Threat level definition

Apache Tomcat Manager and Host Manager Upload Script Cross-Site Scripting Vulnerability

References:

About the security content of Security Update 2008-004 and Mac OS X 10.5.4 (Apple)
Tomcat Homepage (Apache Software Foundation)
[CVE-2007-2450]: Apache Tomcat XSS vulnerability in Manager (Mark Thomas )
CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1) ("Williams, James K" )
CA20090123-01: Security Notice for Cohesion Tomcat (Computer Associates)
RHSA-2007:0569-2: Moderate: tomcat security update (Red Hat)
RHSA-2008:0261-4 Moderate: Red Hat Network Satellite Server security update (Red Hat)
RHSA-2008:0524-4 Red Hat Network Satellite Server security update (Red Hat)
Security Vulnerabilities in Tomcat 4.0 Shipped with Solaris 9 and 10 (Sun Microsystems)
Solution 239312 : Security Vulnerabilities in Tomcat 4.0 Shipped with Solaris (Sun)

Privacy Statement
Copyright 2008, SecurityFocus