20020924 Tuesday September 24, 2002

Tomcat Security Updates. If you're using Tomcat 4.0.4 or Tomcat 4.1.10 - you might want to upgrade to 4.0.5 or 4.1.12.

A security vulnerability has been confirmed to exist in all Apache Tomcat 4.x versions (including Tomcat 4.0.4 and Tomcat 4.1.10), which allows to use a specially crafted URL to return the unprocessed source of a JSP page, or under special circumstances a static resource which would otherwise have been protected by security constraint, without the need of being properly authenticated.

Posted in Java at Sep 24 2002, 01:01:29 AM MDT Add a Comment

Comments:

Post a Comment:
  • HTML Syntax: Allowed
Click me to subscribe
Matt Raible is a Web Architecture Consultant specializing in open source frameworks.
« May 2012
SunMonTueWedThuFriSat
  
1
2
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
23
24
25
26
27
28
29
30
31
  
       
Today

Recent Entries

Tag Cloud