Apache Tomcat SecurityManager Security Bypass Vulnerability

Apache Tomcat SecurityManager Security Bypass Vulnerability

References:

Apache Tomcat 5.x vulnerabilities (Apache)
Apache Tomcat 6.x vulnerabilities (Apache)
Apache Tomcat 7.x vulnerabilities (Apache Software Foundation)
Apache Tomcat Homepage (Apache)
Fixed in Geronimo 2.1.8 (Apache Geronimo)
HPSBUX02645 SSRT100387 rev.1 - HP-UX Apache Web Server, Remote Information Discl (HP)
Multiple vulnerabilities in Apache Tomcat (Oracle)
Tomcat fix for security vulnerability CVE-2010-3718 , CVE-2011-2526 and CVE-2011 (IBM)
ASA-2011-357 Multiple vulnerabilities in Apache Tomcat (Oracle November 2011) (Avaya)
ASA-2011-424 tomcat5 security update (RHSA-2011-1845) (Avaya)
January 10, 2012 - Multiple Tomcat vulnerabilities in IntelligenceCenter (Blue Coat Systems)

Privacy Statement
Copyright 2010, SecurityFocus