Description
Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.
References (23)
Core 23
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28834
Vendor Advisory x_refsource_confirm
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/3638
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/27703
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28915
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/37460
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/487812/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/31681
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0488
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/507985/100/0/threaded
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
Various Sources x_refsource_confirm
http://tomcat.apache.org/security-6.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/57126
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/32222
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200804-10.xml
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2780
Mailing List vendor-advisory
x_refsource_hp
http://marc.info/?l=bugtraq&m=139344343412337&w=2
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT3216
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29711
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3316
Scores
EPSS
0.0506
EPSS Percentile
91.4%
Details
Status
published
Products (12)
apache/tomcat
6.0.5
apache/tomcat
6.0.6
apache/tomcat
6.0.7
apache/tomcat
6.0.8
apache/tomcat
6.0.9
apache/tomcat
6.0.10
apache/tomcat
6.0.11
apache/tomcat
6.0.12
apache/tomcat
6.0.13
apache/tomcat
6.0.14
... and 2 more
Published
Feb 12, 2008
Tracked Since
Feb 18, 2026