CVE ID:	CVE-2008-0002
Description:	Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.
Test IDs:	1.3.6.1.4.1.25623.1.0.60350   1.3.6.1.4.1.25623.1.0.60337
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0002 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html BugTraq ID: 27703 http://www.securityfocus.com/bid/27703 BugTraq ID: 31681 http://www.securityfocus.com/bid/31681 Bugtraq: 20080208 CVE-2008-0002: Tomcat information disclosure vulnerability (Google Search) http://www.securityfocus.com/archive/1/487812/100/0/threaded Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) http://www.securityfocus.com/archive/1/507985/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html http://security.gentoo.org/glsa/glsa-200804-10.xml HPdes Security Advisory: HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 http://secunia.com/advisories/28834 http://secunia.com/advisories/28915 http://secunia.com/advisories/29711 http://secunia.com/advisories/32222 http://secunia.com/advisories/37460 http://secunia.com/advisories/57126 http://securityreason.com/securityalert/3638 SuSE Security Announcement: SUSE-SR:2009:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html http://www.vupen.com/english/advisories/2008/0488 http://www.vupen.com/english/advisories/2008/2780 http://www.vupen.com/english/advisories/2009/3316