Apache Tomcat Cross-Site Scripting Vulnerability

Bugtraq ID:	28481
Class:	Input Validation Error
CVE:	CVE-2006-7195
Remote:	Yes
Local:	No
Published:	Apr 18 2007 12:00AM
Updated:	Jul 06 2010 06:48PM
Credit:	Unknown
Vulnerable:	Redhat Red Hat Network Satellite Server 5.0 Redhat Red Hat Network Satellite Server 4.2 Redhat Network Satellite (for RHEL 4) 4.2 Redhat Network Satellite (for RHEL 3) 4.2 Novell ZENworks Linux Management 7.3 Computer Associates Cohesion Application Configuration Manager 4.5 Apache Tomcat 5.5.17 Apache Tomcat 5.5.16 Apache Tomcat 5.5.15 Apache Tomcat 5.5.14 Apache Tomcat 5.5.13 Apache Tomcat 5.5.12 Apache Tomcat 5.5.11 Apache Tomcat 5.5.10 Apache Tomcat 5.5.9 Apache Tomcat 5.5.8 Apache Tomcat 5.5.7 Apache Tomcat 5.5.6 Apache Tomcat 5.5.5 Apache Tomcat 5.5.4 Apache Tomcat 5.5.3 Apache Tomcat 5.5.2 Apache Tomcat 5.5.1 Apache Tomcat 5.5 Apache Tomcat 5.0.30 Apache Tomcat 5.0.28 Apache Tomcat 5.0.19 Apache Tomcat 5.0.16 Apache Tomcat 5.0.15 Apache Tomcat 5.0.14 Apache Tomcat 5.0.13 Apache Tomcat 5.0.12 Apache Tomcat 5.0.11 Apache Tomcat 5.0.10 Apache Tomcat 5.0.9 Apache Tomcat 5.0.8 Apache Tomcat 5.0.7 Apache Tomcat 5.0.6 Apache Tomcat 5.0.5 Apache Tomcat 5.0.4 Apache Tomcat 5.0.3 Apache Tomcat 5.0.2 Apache Tomcat 5.0.1 Apache Tomcat 5.0 Apache Tomcat 5.0
Not Vulnerable:	Computer Associates Cohesion Application Configuration Manager 4.5 SP1 Apache Tomcat 5.5.18 Apache Tomcat 5.0.31

Apache Tomcat Cross-Site Scripting Vulnerability

Apache Tomcat is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Apache Tomcat Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

Apache Tomcat Cross-Site Scripting Vulnerability

Solution:
The vendor has released fixes. Please see the references for more information.

Apache Tomcat Cross-Site Scripting Vulnerability

References:

• Apache Tomcat Homepage (Apache)
  
• ZLM 7.3 IR3 Tomcat 5.0.30 to fix reported security vulnerabilities (Novell)
  
• CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1) ("Williams, James K" )
  
• CA20090123-01: Security Notice for Cohesion Tomcat (Computer Associates)
  
• RHSA-2008:0261-4 Moderate: Red Hat Network Satellite Server security update (Red Hat)
  
• RHSA-2008:0524-4 Red Hat Network Satellite Server security update (Red Hat)
  
• Tomcat 5.0.28 in ZLM 7.3 subject to Multiple Vendor Multiple HTTP Request Smuggl (Novell)