Gravité: : Medium
  Identifiant(s) CVE: : CVE-2008-1232
  Date du conseil: 21 juillet 2015

  Description

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.

  Information Exposure Rating:

Apply associated Trend Micro DPI Rules.

  Solutions

  Trend Micro Deep Security DPI Rule Number: 1000552
  Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention

  Affected software and version:

  • apache tomcat 4.1.0
  • apache tomcat 4.1.1
  • apache tomcat 4.1.10
  • apache tomcat 4.1.12
  • apache tomcat 4.1.15
  • apache tomcat 4.1.2
  • apache tomcat 4.1.24
  • apache tomcat 4.1.28
  • apache tomcat 4.1.3
  • apache tomcat 4.1.31
  • apache tomcat 4.1.36
  • apache tomcat 5.5.0
  • apache tomcat 5.5.1
  • apache tomcat 5.5.10
  • apache tomcat 5.5.11
  • apache tomcat 5.5.12
  • apache tomcat 5.5.13
  • apache tomcat 5.5.14
  • apache tomcat 5.5.15
  • apache tomcat 5.5.16
  • apache tomcat 5.5.17
  • apache tomcat 5.5.18
  • apache tomcat 5.5.19
  • apache tomcat 5.5.2
  • apache tomcat 5.5.20
  • apache tomcat 5.5.21
  • apache tomcat 5.5.22
  • apache tomcat 5.5.23
  • apache tomcat 5.5.24
  • apache tomcat 5.5.25
  • apache tomcat 6.0
  • apache tomcat 6.0.0
  • apache tomcat 6.0.1
  • apache tomcat 6.0.10
  • apache tomcat 6.0.11
  • apache tomcat 6.0.12
  • apache tomcat 6.0.13
  • apache tomcat 6.0.14
  • apache tomcat 6.0.15
  • apache_software_foundation tomcat 4.1
  • apache_software_foundation tomcat 4.1.32
  • apache_software_foundation tomcat 4.1.34
  • apache_software_foundation tomcat 4.1.37
  • apache_software_foundation tomcat 5.5.26
  • apache_software_foundation tomcat 6.0.16