QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-1157

Back to search

CVE-2010-1157

Published: Apr 23, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

VendorProductVersions

n/a

n/a

affected
n/a

References

DSA-2207
vendor-advisory
x_refsource_DEBIAN
HPSBUX02860
vendor-advisory
x_refsource_HP
MDVSA-2010:177
vendor-advisory
x_refsource_MANDRIVA
ADV-2010-3056
vdb-entry
x_refsource_VUPEN
43310
third-party-advisory
x_refsource_SECUNIA
39574
third-party-advisory
x_refsource_SECUNIA
HPSBOV02762
vendor-advisory
x_refsource_HP
APPLE-SA-2011-10-12-3
vendor-advisory
x_refsource_APPLE
MDVSA-2010:176
vendor-advisory
x_refsource_MANDRIVA
42368
third-party-advisory
x_refsource_SECUNIA
RHSA-2011:0897
vendor-advisory
x_refsource_REDHAT
ADV-2010-0980
vdb-entry
x_refsource_VUPEN
oval:org.mitre.oval:def:19492
vdb-entry
signature
x_refsource_OVAL
57126
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2010:017
vendor-advisory
x_refsource_SUSE
SSRT100825
vendor-advisory
x_refsource_HP
39635
vdb-entry
x_refsource_BID
RHSA-2011:0896
vendor-advisory
x_refsource_REDHAT
HPSBUX02579
vendor-advisory
x_refsource_HP
SSRT101146
vendor-advisory
x_refsource_HP
SSRT100203
vendor-advisory
x_refsource_HP
HPSBST02955
vendor-advisory
x_refsource_HP

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now