Apache Tomcat 多个安全漏洞

<a href="https://www.securityfocus.com/bid/13873" target="_blank">https://www.securityfocus.com/bid/13873</a><br/> <a href="http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200507-004" target="_blank">http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200507-004</a><br/>

Tomcat是一个Servlet容器，实现了对Servlet和JavaServer Page(JSP)的支持，并提供了作为Web服务器的一些特有功能。 远程攻击者可利用漏洞破坏Web cache，绕过Web应用程序防火墙保护，还可以导致跨站脚本攻击。

来源:MISC
链接:http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf
来源:BUGTRAQ
名称:20090127CA20090123-01:CohesionTomcatMultipleVulnerabilities(Updated-v1.1)
链接:http://www.securityfocus.com/archive/1/archive/1/500412/100/0/threaded
来源:BUGTRAQ
名称:20090124CA20090123-01:CohesionTomcatMultipleVulnerabilities
链接:http://www.securityfocus.com/archive/1/archive/1/500396/100/0/threaded
来源:MISC
链接:http://www.securiteam.com/securityreviews/5GP0220G0U.html
来源:VUPEN
名称:ADV-2009-0233
链接:http://www.frsirt.com/english/advisories/2009/0233
来源:support.ca.com
链接:http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540
来源:SECUNIA
名称:33668
链接:http://secunia.com/advisories/33668
来源:BUGTRAQ
名称:20050606AnewwhitepaperbyWatchfire-HTTPRequestSmuggling
链接:http://seclists.org/lists/bugtraq/2005/Jun/0025.html
来源:community.ca.com
链接:http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx
来源:BID
名称:25159
链接:http://www.securityfocus.com/bid/25159
来源:BID
名称:13873
链接:http://www.