Back to search
CVE-2009-0783
Published: Jun 5, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://tomcat.apache.org/security-4.html
x_refsource_CONFIRM
HPSBMA02535
vendor-advisory
x_refsource_HP
http://svn.apache.org/viewvc?rev=652592&view=rev
x_refsource_CONFIRM
MDVSA-2009:138
vendor-advisory
x_refsource_MANDRIVA
FEDORA-2009-11356
vendor-advisory
x_refsource_FEDORA
DSA-2207
vendor-advisory
x_refsource_DEBIAN
HPSBUX02860
vendor-advisory
x_refsource_HP
37460
third-party-advisory
x_refsource_SECUNIA
http://svn.apache.org/viewvc?rev=781542&view=rev
x_refsource_CONFIRM
oval:org.mitre.oval:def:18913
vdb-entry
signature
x_refsource_OVAL
ADV-2010-3056
vdb-entry
x_refsource_VUPEN
20090604 [SECURITY] CVE-2009-0783 Apache Tomcat Information disclosure
mailing-list
x_refsource_BUGTRAQ
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
x_refsource_CONFIRM
35788
third-party-advisory
x_refsource_SECUNIA
SSRT100029
vendor-advisory
x_refsource_HP
http://svn.apache.org/viewvc?rev=781708&view=rev
x_refsource_CONFIRM
APPLE-SA-2010-03-29-1
vendor-advisory
x_refsource_APPLE
http://svn.apache.org/viewvc?rev=739522&view=rev
x_refsource_CONFIRM
ADV-2009-1856
vdb-entry
x_refsource_VUPEN
MDVSA-2010:176
vendor-advisory
x_refsource_MANDRIVA
http://svn.apache.org/viewvc?rev=681156&view=rev
x_refsource_CONFIRM
42368
third-party-advisory
x_refsource_SECUNIA
http://tomcat.apache.org/security-6.html
x_refsource_CONFIRM
http://support.apple.com/kb/HT4077
x_refsource_CONFIRM
https://issues.apache.org/bugzilla/show_bug.cgi?id=45933
x_refsource_CONFIRM
FEDORA-2009-11374
vendor-advisory
x_refsource_FEDORA
oval:org.mitre.oval:def:6450
vdb-entry
signature
x_refsource_OVAL
35685
third-party-advisory
x_refsource_SECUNIA
1022336
vdb-entry
x_refsource_SECTRACK
tomcat-xml-information-disclosure(51195)
vdb-entry
x_refsource_XF
FEDORA-2009-11352
vendor-advisory
x_refsource_FEDORA
http://tomcat.apache.org/security-5.html
x_refsource_CONFIRM
SUSE-SR:2009:012
vendor-advisory
x_refsource_SUSE
HPSBUX02579
vendor-advisory
x_refsource_HP
SSRT101146
vendor-advisory
x_refsource_HP
MDVSA-2009:136
vendor-advisory
x_refsource_MANDRIVA
263529
vendor-advisory
x_refsource_SUNALERT
https://issues.apache.org/bugzilla/show_bug.cgi?id=29936
x_refsource_CONFIRM
SSRT100203
vendor-advisory
x_refsource_HP
35416
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:10716
vdb-entry
signature
x_refsource_OVAL
ADV-2009-3316
vdb-entry
x_refsource_VUPEN
[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/
mailing-list
x_refsource_MLIST
[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now