USN-4557-1: Tomcat vulnerabilities<\/p>\n
It was discovered that the Tomcat realm implementations incorrectly handled
\npasswords when a username didn’t exist. A remote attacker could possibly
\nuse this issue to enumerate usernames. (CVE-2016-0762)<\/p>\n
Alvaro Munoz and Alexander Mirosh discovered that Tomcat incorrectly
\nlimited use of a certain utility method. A malicious application could
\npossibly use this to bypass Security Manager restrictions. (CVE-2016-5018)<\/p>\n
It was discovered that Tomcat incorrectly controlled reading system
\nproperties. A malicious application could possibly use this to bypass
\nSecurity Manager restrictions. (CVE-2016-6794)<\/p>\n
It was discovered that Tomcat incorrectly controlled certain configuration
\nparameters. A malicious application could possibly use this to bypass
\nSecurity Manager restrictions. (CVE-2016-6796)<\/p>\n
It was discovered that Tomcat incorrectly limited access to global JNDI
\nresources. A malicious application could use this to access any global JNDI
\nresource without an explicit ResourceLink. (CVE-2016-6797)<\/p>\n
Regis Leroy discovered that Tomcat incorrectly filtered certain invalid
\ncharacters from the HTTP request line. A remote attacker could possibly
\nuse this issue to inject data into HTTP responses. (CVE-2016-6816)<\/p>\n
Pierre Ernst discovered that the Tomcat JmxRemoteLifecycleListener did not USN-4557-1: Tomcat vulnerabilities It was discovered that the Tomcat realm implementations incorrectly handled passwords when a username didn’t exist. A remote attacker could possibly use this issue to enumerate usernames. (CVE-2016-0762) Alvaro Munoz and Alexander Mirosh discovered that Tomcat incorrectly limited use of a certain utility method. A malicious application could possibly use this to bypass Security Manager restrictions. (CVE-2016-5018) It was discovered that Tomcat incorrectly controlled reading system properties. A malicious application could possibly use this to bypass Security Manager restrictions. (CVE-2016-6794) It was discovered that Tomcat incorrectly controlled certain configuration parameters. A malicious application could possibly use this to bypass Security Manager restrictions. (CVE-2016-6796) It was discovered that Tomcat incorrectly limited access to global JNDI resources. A malicious application could use this to access any global JNDI resource without an explicit ResourceLink. (CVE-2016-6797) Regis Leroy discovered that Tomcat [ more… ]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[586],"tags":[587],"class_list":["post-38783","post","type-post","status-publish","format-standard","hentry","category-ubuntu-usn","tag-ubuntu-usn"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/38783","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/comments?post=38783"}],"version-history":[{"count":1,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/38783\/revisions"}],"predecessor-version":[{"id":38784,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/38783\/revisions\/38784"}],"wp:attachment":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/media?parent=38783"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/categories?post=38783"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/tags?post=38783"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nimplement a recommended fix. A remote attacker could possibly use this
\nissue to execute arbitrary code. (CVE-2016-8735)
\nSource: USN-4557-1: Tomcat vulnerabilities<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"