Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 371485 - <www-servers/tomcat-7.0.14:7: Multiple vulnerabilities (CVE-2011-{1088,1183,1419,1475,1582})
Summary: <www-servers/tomcat-7.0.14:7: Multiple vulnerabilities (CVE-2011-{1088,1183,1...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal trivial (vote)
Assignee: Gentoo Security
URL:
Whiteboard: ~3 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2011-06-13 21:03 UTC by GLSAMaker/CVETool Bot
Modified: 2011-10-22 17:09 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2011-06-13 21:03:56 UTC 
CVE-2011-1088 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1088):
  Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations,
  which allows remote attackers to bypass intended access restrictions via
  HTTP requests to a web application.