Apache Tomcat 上下文参数错误 信息泄露漏洞

<a href="https://www.securityfocus.com/bid/27703" target="_blank">https://www.securityfocus.com/bid/27703</a><br/> <a href="https://cxsecurity.com/issue/WLB-2008020040" target="_blank">https://cxsecurity.com/issue/WLB-2008020040</a><br/> <a href="http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200802-166" target="_blank">http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200802-166</a><br/>

ApacheTomcat当参数处理过程中发生异常时，会处理错误请求的上下文参数，可能允许远程攻击者取得敏感信息，这表现在处理过程中断开，以触发例外。

来源:FEDORA
名称:FEDORA-2008-1603
链接:https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html
来源:FEDORA
名称:FEDORA-2008-1467
链接:https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html
来源:BID
名称:31681
链接:http://www.securityfocus.com/bid/31681
来源:BID
名称:27703
链接:http://www.securityfocus.com/bid/27703
来源:BUGTRAQ
名称:20080208CVE-2008-0002:Tomcatinformationdisclosurevulnerability
链接:http://www.securityfocus.com/archive/1/archive/1/487812/100/0/threaded
来源:VUPEN
名称:ADV-2008-2780
链接:http://www.frsirt.com/english/advisories/2008/2780
来源:VUPEN
名称:ADV-2008-0488
链接:http://www.frsirt.com/english/advisories/2008/0488
来源:tomcat.apache.org
名称:http://tomcat.apache.org/security-6.html
链接:http://tomcat.apache.org/security-6.html
来源:support.apple.com
名称:http://support.apple.com/kb/HT3216
链接:http://support.apple.com/kb/HT3216
来源:SREASON
名称:3638
链接:http://securityreason.com/securityalert/3638
来源:GENTOO
名称:GLSA-200804-10
链接:http://security.gentoo.org/glsa/gl