 Oliver Karow has discovered some vulnerabilities in Apache Tomcat, which can be exploited by malicious people to conduct cross-site scripting attacks.
Various input passed to the "Tomcat Manager" is not properly sanitized
before being returned to the user. This can be exploited to execute arbitrary
HTML and script code in a user's browser session in context of an affected site.
Example:
http://{host}:8080/manager/html/{code}
http://{host}:8080/manager/html/stop?path={code}
http://{host}:8080/manager/html/start?path={code}
Successful exploitation requires that the user has been authenticated.
The vulnerabilities have been confirmed in version 5.5.4. Other versions may
also be affected.
SOFTWARE:
Apache Tomcat 5.x
SOLUTION:
Do not visit untrusted web sites while being logged into "Tomcat Manager".
PROVIDED AND/OR DISCOVERED BY:
Oliver Karow
ORIGINAL ADVISORY:
http://www.oliverkarow.de/research/jakarta556_xss.txt
VERIFY ADVISORY:
http://secunia.com/advisories/13737/
Secunia Security Advisories
| 
Contribute :
Advanced Search :
Web Resources :
Polls :
File Repository
