The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-642:02 advisory.

    Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet     and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by     Sun under the Java Community Process.
    Tomcat is developed in an open and participatory environment and released under the Apache Software     License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around     the world.
    Security issues fixed with this release:
    CVE-2010-3718     Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make     the ServletContext attribute read-only, which allows local web applications to read or write files outside     of the intended working directory, as demonstrated using a directory traversal attack.
    CVE-2010-4172     Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12     through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via     the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp     or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
    CVE-2011-0013     Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Software     Foundation Tomcat 7.0 before 7.0.6, 5.5 before 5.5.32, and 6.0 before 6.0.30 allow remote attackers to     inject arbitrary web script or HTML, as demonstrated via the display-name tag.
    Fixed bugs:
     - Multiple instances of Tomcat can be run simultaneously.
     - Added a symbolic link to the /usr/share/tomcat6/bin/tomcat-juli.jar library needed by the build-jar-     repository command.
     - This update modifies the init script to work correctly regardless of the daemon user's login shell,     preventing the following error message to appear: This account is currently not available. Additionally,     these new tomcat6 packages now set /sbin/nologin as the login shell for the tomcat user upon     installation, as recommended by deployment best practices.
     - Some standard Tomcat directories were missing write permissions for the tomcat group. This has been     fixed  and errors such as No output folder no longer appear.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update fixes a cross-site scripting vulnerability that affects the session list screen. This can be used to steal session cookies because tomcat 6 does not use the httpOnly flag for its cookies.
(CVE-2010-4172)

The version of Tomcat installed on the remote host is prior to 7.0.5. It is, therefore, affected by a vulnerability as referenced in the fixed_in_apache_tomcat_7.0.5_security-7 advisory.

  - Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12     through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via     the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp     or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
    (CVE-2010-4172)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201206-24 (Apache Tomcat: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Apache Tomcat. Please       review the CVE identifiers referenced below for details.
  Impact :

    The vulnerabilities allow an attacker to cause a Denial of Service, to       hijack a session, to bypass authentication, to inject webscript, to       enumerate valid usernames, to read, modify and overwrite arbitrary files,       to bypass intended access restrictions, to delete work-directory files,       to discover the server&rsquo;s hostname or IP, to bypass read permissions for       files or HTTP headers, to read or write files outside of the intended       working directory, and to obtain sensitive information by reading a log       file.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
284044	MiracleLinux 4 : tomcat6-6.0.24-33.AXS4 (AXSA:2011-642:02)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	medium
53806	openSUSE Security Update : tomcat6 (openSUSE-SU-2011:0082-2)	Nessus	SuSE Local Security Checks	2011/5/5	2021/1/14	medium
75760	openSUSE Security Update : tomcat6 (openSUSE-SU-2011:0082-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
51526	Apache Tomcat 7.0.0 < 7.0.5	Nessus	Web Servers	2011/1/14	2024/5/23	medium
59677	GLSA-201206-24 : Apache Tomcat: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2012/6/25	2021/1/6	medium

检测

插件搜索

medium

medium

medium

medium

medium