Tracker / CVE-2009-0783
CVE-2009-0783
Medium 4.2
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
Affected products and versions
| apache | tomcat · 4.1.0 → 4.1.39 |
|---|---|
| apache | tomcat · 5.5.0 → 5.5.27 |
| apache | tomcat · 6.0.0 → 6.0.18 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.