Логотип exploitDog
bind:CVE-2011-2526
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2011-2526

Количество 6

Количество 6

ubuntu логотип

CVE-2011-2526

больше 14 лет назад

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 4.4
EPSS: Низкий
redhat логотип

CVE-2011-2526

больше 14 лет назад

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 2.6
EPSS: Низкий
nvd логотип

CVE-2011-2526

больше 14 лет назад

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 4.4
EPSS: Низкий
debian логотип

CVE-2011-2526

больше 14 лет назад

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7 ...

CVSS2: 4.4
EPSS: Низкий
github логотип

GHSA-9ggm-7897-x4mg

больше 3 лет назад

Improper Input Validation in Apache Tomcat

EPSS: Низкий
oracle-oval логотип

ELSA-2011-1780

почти 14 лет назад

ELSA-2011-1780: tomcat6 security and bug fix update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2011-2526

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 4.4
0%
Низкий
больше 14 лет назад
redhat логотип
CVE-2011-2526

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 2.6
0%
Низкий
больше 14 лет назад
nvd логотип
CVE-2011-2526

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.

CVSS2: 4.4
0%
Низкий
больше 14 лет назад
debian логотип
CVE-2011-2526

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7 ...

CVSS2: 4.4
0%
Низкий
больше 14 лет назад
github логотип
GHSA-9ggm-7897-x4mg

Improper Input Validation in Apache Tomcat

0%
Низкий
больше 3 лет назад
oracle-oval логотип
ELSA-2011-1780

ELSA-2011-1780: tomcat6 security and bug fix update (MODERATE)

почти 14 лет назад

Уязвимостей на страницу