CVE-2014-0075

Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.

Desbordamiento de enteros en la función parseChunkHeader en java/org/apache/coyote/http11/filters/ChunkedInputFilter.java en Apache Tomcat anterior a 6.0.40, 7.x anterior a 7.0.53 y 8.x anterior a 8.0.4 permite a atacantes remotos causar una denegación de servicio (consumo de recursos) a través de un tamaño de fragmento malformado en una codificación de transferencia fragmentada de una solicitud durante la transmisión de datos.

It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-12-03 CVE Reserved
2014-05-29 CVE Published
2023-11-25 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-189: Numeric Errors
CWE-400: Uncontrolled Resource Consumption

CAPEC

References (50)

URL	Tag	Source
http://advisories.mageia.org/MGASA-2014-0268.html	X_refsource_confirm
http://linux.oracle.com/errata/ELSA-2014-0865.html	X_refsource_confirm
http://seclists.org/fulldisclosure/2014/Dec/23	Mailing List
http://secunia.com/advisories/59121	Third Party Advisory
http://secunia.com/advisories/59616	Third Party Advisory
http://secunia.com/advisories/59678	Third Party Advisory
http://secunia.com/advisories/59732	Third Party Advisory
http://secunia.com/advisories/59835	Third Party Advisory
http://secunia.com/advisories/59849	Third Party Advisory
http://secunia.com/advisories/59873	Third Party Advisory
http://secunia.com/advisories/60729	Third Party Advisory
http://secunia.com/advisories/60793	Third Party Advisory
http://svn.apache.org/viewvc?view=revision&revision=1578337	X_refsource_confirm
http://svn.apache.org/viewvc?view=revision&revision=1578341	X_refsource_confirm
http://svn.apache.org/viewvc?view=revision&revision=1579262	X_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21678231	X_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21680603	X_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21681528	X_refsource_confirm
http://www.novell.com/support/kb/doc.php?id=7010166	X_refsource_confirm
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html	X_refsource_confirm
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html	X_refsource_confirm
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html	X_refsource_confirm
http://www.securityfocus.com/archive/1/534161/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/67671	Vdb Entry
http://www.vmware.com/security/advisories/VMSA-2014-0012.html	X_refsource_confirm
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013	X_refsource_confirm
https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E	Mailing List

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html	2023-11-07
http://marc.info/?l=bugtraq&m=141017844705317&w=2	2023-11-07
http://marc.info/?l=bugtraq&m=141390017113542&w=2	2023-11-07
http://marc.info/?l=bugtraq&m=144498216801440&w=2	2023-11-07
http://rhn.redhat.com/errata/RHSA-2015-0675.html	2023-11-07
http://rhn.redhat.com/errata/RHSA-2015-0720.html	2023-11-07
http://rhn.redhat.com/errata/RHSA-2015-0765.html	2023-11-07
http://tomcat.apache.org/security-6.html	2023-11-07
http://tomcat.apache.org/security-7.html	2023-11-07
http://tomcat.apache.org/security-8.html	2023-11-07
http://www.debian.org/security/2016/dsa-3447	2023-11-07
http://www.debian.org/security/2016/dsa-3530	2023-11-07
http://www.mandriva.com/security/advisories?name=MDVSA-2015:052	2023-11-07
http://www.mandriva.com/security/advisories?name=MDVSA-2015:053	2023-11-07
http://www.mandriva.com/security/advisories?name=MDVSA-2015:084	2023-11-07
https://access.redhat.com/security/cve/CVE-2014-0075	2015-05-14
https://bugzilla.redhat.com/show_bug.cgi?id=1072776	2015-05-14

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.0 Search vendor "Apache" for product "Tomcat" and version "7.0.0"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.0 Search vendor "Apache" for product "Tomcat" and version "7.0.0"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.1 Search vendor "Apache" for product "Tomcat" and version "7.0.1"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.2 Search vendor "Apache" for product "Tomcat" and version "7.0.2"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.2 Search vendor "Apache" for product "Tomcat" and version "7.0.2"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.3 Search vendor "Apache" for product "Tomcat" and version "7.0.3"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.4 Search vendor "Apache" for product "Tomcat" and version "7.0.4"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.4 Search vendor "Apache" for product "Tomcat" and version "7.0.4"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.5 Search vendor "Apache" for product "Tomcat" and version "7.0.5"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.6 Search vendor "Apache" for product "Tomcat" and version "7.0.6"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.7 Search vendor "Apache" for product "Tomcat" and version "7.0.7"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.8 Search vendor "Apache" for product "Tomcat" and version "7.0.8"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.9 Search vendor "Apache" for product "Tomcat" and version "7.0.9"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.10 Search vendor "Apache" for product "Tomcat" and version "7.0.10"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.11 Search vendor "Apache" for product "Tomcat" and version "7.0.11"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.12 Search vendor "Apache" for product "Tomcat" and version "7.0.12"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.13 Search vendor "Apache" for product "Tomcat" and version "7.0.13"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.14 Search vendor "Apache" for product "Tomcat" and version "7.0.14"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.15 Search vendor "Apache" for product "Tomcat" and version "7.0.15"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.16 Search vendor "Apache" for product "Tomcat" and version "7.0.16"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.17 Search vendor "Apache" for product "Tomcat" and version "7.0.17"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.18 Search vendor "Apache" for product "Tomcat" and version "7.0.18"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.19 Search vendor "Apache" for product "Tomcat" and version "7.0.19"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.20 Search vendor "Apache" for product "Tomcat" and version "7.0.20"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.21 Search vendor "Apache" for product "Tomcat" and version "7.0.21"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.22 Search vendor "Apache" for product "Tomcat" and version "7.0.22"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.23 Search vendor "Apache" for product "Tomcat" and version "7.0.23"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.24 Search vendor "Apache" for product "Tomcat" and version "7.0.24"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.25 Search vendor "Apache" for product "Tomcat" and version "7.0.25"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.26 Search vendor "Apache" for product "Tomcat" and version "7.0.26"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.27 Search vendor "Apache" for product "Tomcat" and version "7.0.27"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.28 Search vendor "Apache" for product "Tomcat" and version "7.0.28"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.29 Search vendor "Apache" for product "Tomcat" and version "7.0.29"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.30 Search vendor "Apache" for product "Tomcat" and version "7.0.30"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.31 Search vendor "Apache" for product "Tomcat" and version "7.0.31"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.32 Search vendor "Apache" for product "Tomcat" and version "7.0.32"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.33 Search vendor "Apache" for product "Tomcat" and version "7.0.33"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.34 Search vendor "Apache" for product "Tomcat" and version "7.0.34"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.35 Search vendor "Apache" for product "Tomcat" and version "7.0.35"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.36 Search vendor "Apache" for product "Tomcat" and version "7.0.36"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.37 Search vendor "Apache" for product "Tomcat" and version "7.0.37"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.38 Search vendor "Apache" for product "Tomcat" and version "7.0.38"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.39 Search vendor "Apache" for product "Tomcat" and version "7.0.39"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.40 Search vendor "Apache" for product "Tomcat" and version "7.0.40"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.41 Search vendor "Apache" for product "Tomcat" and version "7.0.41"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.42 Search vendor "Apache" for product "Tomcat" and version "7.0.42"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.43 Search vendor "Apache" for product "Tomcat" and version "7.0.43"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.44 Search vendor "Apache" for product "Tomcat" and version "7.0.44"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.45 Search vendor "Apache" for product "Tomcat" and version "7.0.45"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.46 Search vendor "Apache" for product "Tomcat" and version "7.0.46"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.47 Search vendor "Apache" for product "Tomcat" and version "7.0.47"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.48 Search vendor "Apache" for product "Tomcat" and version "7.0.48"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.49 Search vendor "Apache" for product "Tomcat" and version "7.0.49"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.50 Search vendor "Apache" for product "Tomcat" and version "7.0.50"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.52 Search vendor "Apache" for product "Tomcat" and version "7.0.52"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.0 Search vendor "Apache" for product "Tomcat" and version "8.0.0"		rc1		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.0 Search vendor "Apache" for product "Tomcat" and version "8.0.0"		rc10		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.0 Search vendor "Apache" for product "Tomcat" and version "8.0.0"		rc2		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.0 Search vendor "Apache" for product "Tomcat" and version "8.0.0"		rc5		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.1 Search vendor "Apache" for product "Tomcat" and version "8.0.1"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.3 Search vendor "Apache" for product "Tomcat" and version "8.0.3"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				<= 6.0.39 Search vendor "Apache" for product "Tomcat" and version " <= 6.0.39"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6 Search vendor "Apache" for product "Tomcat" and version "6"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0 Search vendor "Apache" for product "Tomcat" and version "6.0"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.0 Search vendor "Apache" for product "Tomcat" and version "6.0.0"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.0 Search vendor "Apache" for product "Tomcat" and version "6.0.0"		alpha		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.1 Search vendor "Apache" for product "Tomcat" and version "6.0.1"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.1 Search vendor "Apache" for product "Tomcat" and version "6.0.1"		alpha		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.2 Search vendor "Apache" for product "Tomcat" and version "6.0.2"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.2 Search vendor "Apache" for product "Tomcat" and version "6.0.2"		alpha		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.2 Search vendor "Apache" for product "Tomcat" and version "6.0.2"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.3 Search vendor "Apache" for product "Tomcat" and version "6.0.3"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.4 Search vendor "Apache" for product "Tomcat" and version "6.0.4"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.4 Search vendor "Apache" for product "Tomcat" and version "6.0.4"		alpha		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.5 Search vendor "Apache" for product "Tomcat" and version "6.0.5"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.6 Search vendor "Apache" for product "Tomcat" and version "6.0.6"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.6 Search vendor "Apache" for product "Tomcat" and version "6.0.6"		alpha		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.7 Search vendor "Apache" for product "Tomcat" and version "6.0.7"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.7 Search vendor "Apache" for product "Tomcat" and version "6.0.7"		alpha		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.7 Search vendor "Apache" for product "Tomcat" and version "6.0.7"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.8 Search vendor "Apache" for product "Tomcat" and version "6.0.8"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.8 Search vendor "Apache" for product "Tomcat" and version "6.0.8"		alpha		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.9 Search vendor "Apache" for product "Tomcat" and version "6.0.9"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.9 Search vendor "Apache" for product "Tomcat" and version "6.0.9"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.10 Search vendor "Apache" for product "Tomcat" and version "6.0.10"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.11 Search vendor "Apache" for product "Tomcat" and version "6.0.11"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.12 Search vendor "Apache" for product "Tomcat" and version "6.0.12"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.13 Search vendor "Apache" for product "Tomcat" and version "6.0.13"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.14 Search vendor "Apache" for product "Tomcat" and version "6.0.14"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.15 Search vendor "Apache" for product "Tomcat" and version "6.0.15"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.16 Search vendor "Apache" for product "Tomcat" and version "6.0.16"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.17 Search vendor "Apache" for product "Tomcat" and version "6.0.17"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.18 Search vendor "Apache" for product "Tomcat" and version "6.0.18"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.19 Search vendor "Apache" for product "Tomcat" and version "6.0.19"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.20 Search vendor "Apache" for product "Tomcat" and version "6.0.20"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.24 Search vendor "Apache" for product "Tomcat" and version "6.0.24"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.26 Search vendor "Apache" for product "Tomcat" and version "6.0.26"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.27 Search vendor "Apache" for product "Tomcat" and version "6.0.27"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.28 Search vendor "Apache" for product "Tomcat" and version "6.0.28"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.29 Search vendor "Apache" for product "Tomcat" and version "6.0.29"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.30 Search vendor "Apache" for product "Tomcat" and version "6.0.30"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.31 Search vendor "Apache" for product "Tomcat" and version "6.0.31"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.32 Search vendor "Apache" for product "Tomcat" and version "6.0.32"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.33 Search vendor "Apache" for product "Tomcat" and version "6.0.33"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.35 Search vendor "Apache" for product "Tomcat" and version "6.0.35"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.36 Search vendor "Apache" for product "Tomcat" and version "6.0.36"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				6.0.37 Search vendor "Apache" for product "Tomcat" and version "6.0.37"		-		Affected