CVE ID:	CVE-2008-1947
Description:	Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
Test IDs:	1.3.6.1.4.1.25623.1.0.122558   1.3.6.1.4.1.25623.1.0.61637   1.3.6.1.4.1.25623.1.0.61638   1.3.6.1.4.1.25623.1.0.61580   1.3.6.1.4.1.25623.1.0.61110
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1947 1020624 http://www.securitytracker.com/id?1020624 20080602 [SECURITY] CVE-2008-1947: Tomcat host-manager XSS vulnerability http://www.securityfocus.com/archive/1/492958/100/0/threaded 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components http://www.securityfocus.com/archive/1/507985/100/0/threaded 29502 http://www.securityfocus.com/bid/29502 30500 http://secunia.com/advisories/30500 30592 http://secunia.com/advisories/30592 30967 http://secunia.com/advisories/30967 31639 http://secunia.com/advisories/31639 31681 http://www.securityfocus.com/bid/31681 31865 http://secunia.com/advisories/31865 31891 http://secunia.com/advisories/31891 32120 http://secunia.com/advisories/32120 32222 http://secunia.com/advisories/32222 32266 http://secunia.com/advisories/32266 33797 http://secunia.com/advisories/33797 33999 http://secunia.com/advisories/33999 34013 http://secunia.com/advisories/34013 37460 http://secunia.com/advisories/37460 57126 http://secunia.com/advisories/57126 ADV-2008-1725 http://www.vupen.com/english/advisories/2008/1725 ADV-2008-2780 http://www.vupen.com/english/advisories/2008/2780 ADV-2008-2823 http://www.vupen.com/english/advisories/2008/2823 ADV-2009-0320 http://www.vupen.com/english/advisories/2009/0320 ADV-2009-0503 http://www.vupen.com/english/advisories/2009/0503 ADV-2009-3316 http://www.vupen.com/english/advisories/2009/3316 APPLE-SA-2008-10-09 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html DSA-1593 http://www.debian.org/security/2008/dsa-1593 FEDORA-2008-7977 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html FEDORA-2008-8113 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html FEDORA-2008-8130 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 HPSBUX02401 http://marc.info/?l=bugtraq&m=123376588623823&w=2 MDVSA-2008:188 http://www.mandriva.com/security/advisories?name=MDVSA-2008:188 RHSA-2008:0648 http://www.redhat.com/support/errata/RHSA-2008-0648.html RHSA-2008:0862 http://www.redhat.com/support/errata/RHSA-2008-0862.html RHSA-2008:0864 http://www.redhat.com/support/errata/RHSA-2008-0864.html SSRT090005 http://marc.info/?l=bugtraq&m=123376588623823&w=2 SUSE-SR:2008:014 http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html SUSE-SR:2009:004 http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html [tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/ https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/ https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E [tomcat-user] 20080602 [SECURITY] CVE-2008-1947: Tomcat host-manager XSS vulnerability http://marc.info/?l=tomcat-user&m=121244319501278&w=2 apache-tomcat-hostmanager-xss(42816) https://exchange.xforce.ibmcloud.com/vulnerabilities/42816 http://support.apple.com/kb/HT3216 http://support.apple.com/kb/HT3216 http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-6.html http://www.vmware.com/security/advisories/VMSA-2009-0002.html http://www.vmware.com/security/advisories/VMSA-2009-0002.html http://www.vmware.com/security/advisories/VMSA-2009-0016.html http://www.vmware.com/security/advisories/VMSA-2009-0016.html oval:org.mitre.oval:def:11534 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11534 oval:org.mitre.oval:def:6009 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6009