• info
• discussion
• exploit
• solution
• references

Apache Tomcat 'RequestDispatcher' Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu libservlet2.5-java_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/libservlet2.5-ja va_6.0.18-0ubuntu3.2_all.deb


• Ubuntu libtomcat6-java_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/libtomcat6-java_ 6.0.18-0ubuntu3.2_all.deb


• Ubuntu tomcat6-admin_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-admin_6. 0.18-0ubuntu3.2_all.deb


• Ubuntu tomcat6-common_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-common_6 .0.18-0ubuntu3.2_all.deb


• Ubuntu tomcat6-docs_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-docs_6.0 .18-0ubuntu3.2_all.deb


• Ubuntu tomcat6-examples_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-examples _6.0.18-0ubuntu3.2_all.deb


• Ubuntu tomcat6-user_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-user_6.0 .18-0ubuntu3.2_all.deb


• Ubuntu tomcat6_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6_6.0.18-0 ubuntu3.2_all.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu libservlet2.5-java-doc_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/libservlet2.5-ja va-doc_6.0.18-0ubuntu6.1_all.deb


• Ubuntu libservlet2.5-java_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/libservlet2.5-ja va_6.0.18-0ubuntu6.1_all.deb


• Ubuntu libtomcat6-java_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/libtomcat6-java_ 6.0.18-0ubuntu6.1_all.deb


• Ubuntu tomcat6-admin_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-admin_6. 0.18-0ubuntu6.1_all.deb


• Ubuntu tomcat6-common_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-common_6 .0.18-0ubuntu6.1_all.deb


• Ubuntu tomcat6-docs_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-docs_6.0 .18-0ubuntu6.1_all.deb


• Ubuntu tomcat6-examples_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-examples _6.0.18-0ubuntu6.1_all.deb


• Ubuntu tomcat6-user_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-user_6.0 .18-0ubuntu6.1_all.deb


• Ubuntu tomcat6_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6_6.0.18-0 ubuntu6.1_all.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu libservlet2.5-java-doc_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/libservlet2.5-ja va-doc_6.0.18-0ubuntu6.1_all.deb


• Ubuntu libservlet2.5-java_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/libservlet2.5-ja va_6.0.18-0ubuntu6.1_all.deb


• Ubuntu libtomcat6-java_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/libtomcat6-java_ 6.0.18-0ubuntu6.1_all.deb


• Ubuntu tomcat6-admin_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-admin_6. 0.18-0ubuntu6.1_all.deb


• Ubuntu tomcat6-common_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-common_6 .0.18-0ubuntu6.1_all.deb


• Ubuntu tomcat6-docs_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-docs_6.0 .18-0ubuntu6.1_all.deb


• Ubuntu tomcat6-examples_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-examples _6.0.18-0ubuntu6.1_all.deb


• Ubuntu tomcat6-user_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-user_6.0 .18-0ubuntu6.1_all.deb


• Ubuntu tomcat6_6.0.18-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6_6.0.18-0 ubuntu6.1_all.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu libservlet2.5-java_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/libservlet2.5-ja va_6.0.18-0ubuntu3.2_all.deb


• Ubuntu libtomcat6-java_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/libtomcat6-java_ 6.0.18-0ubuntu3.2_all.deb


• Ubuntu tomcat6-admin_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-admin_6. 0.18-0ubuntu3.2_all.deb


• Ubuntu tomcat6-common_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-common_6 .0.18-0ubuntu3.2_all.deb


• Ubuntu tomcat6-docs_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-docs_6.0 .18-0ubuntu3.2_all.deb


• Ubuntu tomcat6-examples_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-examples _6.0.18-0ubuntu3.2_all.deb


• Ubuntu tomcat6-user_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6-user_6.0 .18-0ubuntu3.2_all.deb


• Ubuntu tomcat6_6.0.18-0ubuntu3.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tomcat6/tomcat6_6.0.18-0 ubuntu3.2_all.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva tomcat5-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-admin-webapps-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-common-lib-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-jasper-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-jasper-eclipse-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-jasper-javadoc-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-jsp-2.0-api-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-jsp-2.0-api-javadoc-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-server-lib-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-servlet-2.4-api-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-servlet-2.4-api-javadoc-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-webapps-5.5.27-0.3.0.1mdv2009.0.noarch.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5

• Mandriva tomcat5-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-admin-webapps-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-common-lib-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-jasper-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-jasper-eclipse-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-jasper-javadoc-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-jsp-2.0-api-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-jsp-2.0-api-javadoc-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-server-lib-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-servlet-2.4-api-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-servlet-2.4-api-javadoc-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/


• Mandriva tomcat5-webapps-5.5.27-0.3.0.2mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/

HP Performance Manager 8.20

• HP HPPM8CPI_00001
  HP-UX (IA)
  http://support.openview.hp.com/selfsolve/patches


• HP HPPM8CPL_00001
  Linux
  http://support.openview.hp.com/selfsolve/patches


• HP HPPM8CPP_00001
  HP-UX (PA)
  http://support.openview.hp.com/selfsolve/patches


• HP HPPM8CPS_00001
  Solaris
  http://support.openview.hp.com/selfsolve/patches


• HP HPPM8CPW_00001
  Windows
  http://support.openview.hp.com/selfsolve/patches

Apple Mac OS X Server 10.6

• Apple MacOSXServerUpdCombo10.6.3.dmg
  http://www.apple.com/support/downloads/

HP Performance Manager 8.10

• HP HPPM8CPI_00001
  HP-UX (IA)
  http://support.openview.hp.com/selfsolve/patches


• HP HPPM8CPL_00001
  Linux
  http://support.openview.hp.com/selfsolve/patches


• HP HPPM8CPP_00001
  HP-UX (PA)
  http://support.openview.hp.com/selfsolve/patches


• HP HPPM8CPS_00001
  Solaris
  http://support.openview.hp.com/selfsolve/patches


• HP HPPM8CPW_00001
  Windows
  http://support.openview.hp.com/selfsolve/patches

Apache Software Foundation Tomcat 4.1.12

• Apache Software Foundation Revision 782763
  http://svn.apache.org/viewvc?view=rev&revision=782763


• Apache Software Foundation Revision 783292
  http://svn.apache.org/viewvc?view=rev&revision=783292

Apache Software Foundation Tomcat 4.1.34

• Apache Software Foundation Revision 782763
  http://svn.apache.org/viewvc?view=rev&revision=782763


• Apache Software Foundation Revision 783292
  http://svn.apache.org/viewvc?view=rev&revision=783292

Apache Software Foundation Tomcat 4.1.36

• Apache Software Foundation Revision 782763
  http://svn.apache.org/viewvc?view=rev&revision=782763


• Apache Software Foundation Revision 783292
  http://svn.apache.org/viewvc?view=rev&revision=783292

Apache Software Foundation Tomcat 5.5.12

• Apache Software Foundation Revision 782757
  http://svn.apache.org/viewvc?view=rev&revision=782757


• Apache Software Foundation Revision 783291
  http://svn.apache.org/viewvc?view=rev&revision=783291

Apache Software Foundation Tomcat 5.5.14

• Apache Software Foundation Revision 782757
  http://svn.apache.org/viewvc?view=rev&revision=782757


• Apache Software Foundation Revision 783291
  http://svn.apache.org/viewvc?view=rev&revision=783291

Apache Software Foundation Tomcat 5.5.19

• Apache Software Foundation Revision 782757
  http://svn.apache.org/viewvc?view=rev&revision=782757


• Apache Software Foundation Revision 783291
  http://svn.apache.org/viewvc?view=rev&revision=783291

Apache Software Foundation Tomcat 5.5.21

• Apache Software Foundation Revision 782757
  http://svn.apache.org/viewvc?view=rev&revision=782757


• Apache Software Foundation Revision 783291
  http://svn.apache.org/viewvc?view=rev&revision=783291

Apache Software Foundation Tomcat 5.5.23

• Apache Software Foundation Revision 782757
  http://svn.apache.org/viewvc?view=rev&revision=782757


• Apache Software Foundation Revision 783291
  http://svn.apache.org/viewvc?view=rev&revision=783291

Apache Software Foundation Tomcat 6.0.13

• Apache Software Foundation Revision 734734
  http://svn.apache.org/viewvc?view=rev&revision=734734

Apache Software Foundation Tomcat 6.0.7

• Apache Software Foundation Revision 734734
  http://svn.apache.org/viewvc?view=rev&revision=734734

Apache Software Foundation Tomcat 6.0.8

• Apache Software Foundation Revision 734734
  http://svn.apache.org/viewvc?view=rev&revision=734734