[opencms-dev] security tracker reports tomcat security weaknesses

[Christoph P. Kukulies]

Since Tomcat ist OpenCms' working horse:

Today in Security Tracker: http://www.securitytracker.com

Excerpt:

 4. Tomcat
     Vendor: Apache Software Foundation

     A vulnerability was reported in Tomcat.  A remote authenticated
     user can access other web applications on the target system.

     Impact: Disclosure of user information

     Alert: http://securitytracker.com/alerts/2009/Jun/1022336.html

 8. Tomcat
     Vendor: Apache Software Foundation

     A vulnerability was reported in Apache Tomcat.  A remote user
     can determine valid usernames on the target system.

     Impact: Disclosure of system information

     Alert: http://securitytracker.com/alerts/2009/Jun/1022332.html

 9. Tomcat
     Vendor: Apache Software Foundation

     A vulnerability was reported in Apache Tomcat.  A remote user
     can cause denial of service conditions.

     Impact: Denial of service via network

     Alert: http://securitytracker.com/alerts/2009/Jun/1022331.html


--
Chris Christoph P. U. Kukulies kukulies (at) rwth-aachen.de