>> Apache Tomcat Cross Site Scripting and Security Bypass Vulnerabilities
Title : Apache Tomcat Cross Site Scripting and Security Bypass Vulnerabilities VUPEN ID : VUPEN/ADV-2008-2305 CVE ID : CVE-2008-1232 - CVE-2008-2370 CWE ID : CWE-79 - CWE-264
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2008-08-06
Technical Description
Two vulnerabilities have been identified in Apache Tomcat, which could be exploited by attackers to bypass security restrictions or gain knowledge of sensitive information.
The first issue is caused by an input validation error when processing arguments passed to the "HttpServletResponse.sendError()" call and displayed via the "reason-phrase" field of HTTP response, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
The second vulnerability is caused due to the target path being normalised before the query string was removed while using a RequestDispatcher, which could be exploited by attackers to access protected content.
