Apache Tomcat 'RemoteFilterValve' Security Bypass Vulnerability

Threat level definition

Apache Tomcat 'RemoteFilterValve' Security Bypass Vulnerability

References:

Apache Tomcat 4.x vulnerabilities (Apache)
Apache Tomcat 5.x vulnerabilities (Apache)
Apache Tomcat Homepage (Apache)
Synchronization problem with RequestFilterValve (Slavik Markovich)
[SECURITY] CVE-2008-3271 - Apache Tomcat information disclosure (Mark Thomas )
Interstage Application Server: Vulnerability may allow access from a non-permitt (Fujitsu)
JVNDB-2008-000069 Apache Tomcat allows access from a non-permitted IP address (JVN)
NV09-006 (NEC)

Privacy Statement
Copyright 2008, SecurityFocus