CVE ID:	CVE-2011-2481
Description:	Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application. NOTE: this vulnerability exists because of a CVE-2009-0783 regression.
Test IDs:	1.3.6.1.4.1.25623.1.0.103199
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2481 1025924 http://securitytracker.com/id?1025924 49147 http://www.securityfocus.com/bid/49147 57126 http://secunia.com/advisories/57126 HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 http://svn.apache.org/viewvc?view=revision&revision=1137753 http://svn.apache.org/viewvc?view=revision&revision=1137753 http://svn.apache.org/viewvc?view=revision&revision=1138788 http://svn.apache.org/viewvc?view=revision&revision=1138788 http://tomcat.apache.org/security-7.html http://tomcat.apache.org/security-7.html https://issues.apache.org/bugzilla/show_bug.cgi?id=51395 https://issues.apache.org/bugzilla/show_bug.cgi?id=51395