Gentoo Linux Security Advisory GLSA 200705-03
https://security.gentoo.org/
Severity: Low
Title: Tomcat: Information disclosure
Date: May 01, 2007
Bugs: #173122
ID: 200705-03
Synopsis
=======
A vulnerability has been discovered in Tomcat that allows for the
disclosure of sensitive information.
Background
=========
Tomcat is the Apache Jakarta Project's official implementation of Java
Servlets and Java Server Pages.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 www-servers/tomcat < 5.5.22 >= 5.5.22
==========
Tomcat allows special characters like slash, backslash or URL-encoded
backslash as a separator, while Apache does not.
Impact
=====
A remote attacker ...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.