Логотип exploitDog
bind:CVE-2011-2526
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2011-2526

Количество 6

Количество 6

ubuntu логотип

CVE-2011-2526

почти 14 лет назад

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 4.4
EPSS: Низкий
redhat логотип

CVE-2011-2526

почти 14 лет назад

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 2.6
EPSS: Низкий
nvd логотип

CVE-2011-2526

почти 14 лет назад

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 4.4
EPSS: Низкий
debian логотип

CVE-2011-2526

почти 14 лет назад

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7 ...

CVSS2: 4.4
EPSS: Низкий
github логотип

GHSA-9ggm-7897-x4mg

около 3 лет назад

Improper Input Validation in Apache Tomcat

EPSS: Низкий
oracle-oval логотип

ELSA-2011-1780

больше 13 лет назад

ELSA-2011-1780: tomcat6 security and bug fix update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2011-2526

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 4.4
0%
Низкий
почти 14 лет назад
redhat логотип
CVE-2011-2526

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 2.6
0%
Низкий
почти 14 лет назад
nvd логотип
CVE-2011-2526

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 4.4
0%
Низкий
почти 14 лет назад
debian логотип
CVE-2011-2526

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7 ...

CVSS2: 4.4
0%
Низкий
почти 14 лет назад
github логотип
GHSA-9ggm-7897-x4mg

Improper Input Validation in Apache Tomcat

0%
Низкий
около 3 лет назад
oracle-oval логотип
ELSA-2011-1780

ELSA-2011-1780: tomcat6 security and bug fix update (MODERATE)

больше 13 лет назад

Уязвимостей на страницу