Test Kennung:	1.3.6.1.4.1.25623.1.0.103032
Kategorie:	Web Servers
Titel:	Apache Tomcat 'sort' and 'orderBy' Parameters XSS Vulnerabilities (Dec 2010/Jan 2011)
Zusammenfassung:	Apache Tomcat is prone to multiple cross-site scripting (XSS); vulnerabilities because it fails to properly sanitize user-supplied input.
Beschreibung:	Summary: Apache Tomcat is prone to multiple cross-site scripting (XSS) vulnerabilities because it fails to properly sanitize user-supplied input. Vulnerability Impact: An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. Affected Software/OS: Apache Tomcat versions 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4. Solution: Update to version 6.0.30, 7.0.5 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4172 1024764 http://securitytracker.com/id?1024764 20101122 [SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html http://www.securityfocus.com/archive/1/514866/100/0/threaded 42337 http://secunia.com/advisories/42337 43019 http://secunia.com/advisories/43019 45015 http://www.securityfocus.com/bid/45015 45022 http://secunia.com/advisories/45022 57126 http://secunia.com/advisories/57126 ADV-2010-3047 http://www.vupen.com/english/advisories/2010/3047 ADV-2011-0203 http://www.vupen.com/english/advisories/2011/0203 APPLE-SA-2011-10-12-3 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 RHSA-2011:0791 http://www.redhat.com/support/errata/RHSA-2011-0791.html RHSA-2011:0896 http://www.redhat.com/support/errata/RHSA-2011-0896.html RHSA-2011:0897 http://www.redhat.com/support/errata/RHSA-2011-0897.html USN-1048-1 http://www.ubuntu.com/usn/USN-1048-1 http://support.apple.com/kb/HT5002 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html http://svn.apache.org/viewvc?view=revision&revision=1037778 http://svn.apache.org/viewvc?view=revision&revision=1037779 http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-7.html https://bugzilla.redhat.com/show_bug.cgi?id=656246 tomcat-sessionlist-xss(63422) https://exchange.xforce.ibmcloud.com/vulnerabilities/63422
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.