Multiple Java Runtime Implementations UTF-8 Input Validation Vulnerability

Threat level definition

Multiple Java Runtime Implementations UTF-8 Input Validation Vulnerability

References:

Apache Tomcat 6.x vulnerabilities (Apache)
Apache Tomcat Homepage (Apache)
Changes in 1.6.0_11 (Sun)
Harmony Homepage (Apache Software Foundation)
JBoss Enterprise Application Platform 4.2 Release Notes CP04 (Red Hat)
OpenJDK Homepage (OpenJDK)
Oracle Containers For Java Directory Traversal (OC4J) Oracle Application Server (Eduardo Vela)
Release Name: 3.0.5 (WiKID Systems)
Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability (emericboit@yahoo.fr)
CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Updated (Apache)
CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Updated (Mark Thomas )
Java Runtime UTF-8 Decoder Smuggling Vector ("William A. Rowe, Jr." )
[SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - (Mark Thomas )
ASA-2008-401 - tomcat security update (RHSA-2008-0862) (Avaya)
RHSA-2008:0648-10 tomcat security update (Red Hat)
Vulnerability Note VU#343355 Apache Tomcat UTF8 Directory Traversal Vulnerabilit (US-CERT)

Privacy Statement
Copyright 2008, SecurityFocus