Apache Software Foundation Tomcat 6.0
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:tomcat:6.0:*:*:*:*:*:*:*
part: a version: 6.0 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Tomcat (caaa56d3-0cc4-5735-aab9-a3a1a7f4dc56) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/tomcat |
purl2cpe | 2026-06-01 10:14:27.060521 |
pkg:github/apache/tomcat |
purl2cpe | 2026-06-01 10:14:27.060523 |
pkg:maven/org.apache.tomcat/tomcat |
purl2cpe | 2026-06-01 10:14:27.060524 |
pkg:rpm/fedora/tomcat |
purl2cpe | 2026-06-01 10:14:27.060525 |
pkg:rpm/opensuse/tomcat |
purl2cpe | 2026-06-01 10:14:27.060527 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-9775 |
vulnerable | 2026-06-08 05:08:24.487029 |
Details available
The postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0.45+dfsg-1~deb8u1 on Debian jessie, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 14.04 LTS; the tomcat7 package before 7.0.28-4+deb7u7 on Debian wheezy, before 7.0.56-3+deb8u6 on Debian jessie, before 7.0.52-1ubuntu0.8 on Ubuntu 14.04 LTS, and on Ubuntu 12.04 LTS, 16.04 LTS, and 16.10; and the tomcat8 package before 8.0.14-1+deb8u5 on Debian jessie, before 8.0.32-1ubuntu1.3 on Ubuntu 16.04 LTS, before 8.0.37-1ubuntu0.1 on Ubuntu 16.10, and before 8.0.38-2ubuntu1 on Ubuntu 17.04 might allow local users with access to the tomcat account to gain root privileges via a setgid program in the Catalina directory, as demonstrated by /etc/tomcat8/Catalina/attack.
Published: 2017-03-23T16:00:00.000Z
Updated: 2024-08-06T02:59:03.584Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9774 |
vulnerable | 2026-06-08 05:08:24.485086 |
Details available
The postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 14.04 LTS; the tomcat7 package before 7.0.28-4+deb7u8 on Debian wheezy, before 7.0.56-3+deb8u6 on Debian jessie, before 7.0.52-1ubuntu0.8 on Ubuntu 14.04 LTS, and on Ubuntu 12.04 LTS, 16.04 LTS, and 16.10; and the tomcat8 package before 8.0.14-1+deb8u5 on Debian jessie, before 8.0.32-1ubuntu1.3 on Ubuntu 16.04 LTS, before 8.0.37-1ubuntu0.1 on Ubuntu 16.10, and before 8.0.38-2ubuntu1 on Ubuntu 17.04 might allow local users with access to the tomcat account to obtain sensitive information or gain root privileges via a symlink attack on the Catalina localhost directory.
Published: 2017-03-23T16:00:00.000Z
Updated: 2024-08-06T02:59:03.542Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1240 |
vulnerable | 2026-06-08 05:07:26.960808 |
Details available
The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out.
Published: 2016-10-03T00:00:00.000Z
Updated: 2024-08-05T22:48:13.696Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0119 |
vulnerable | 2026-06-08 05:05:11.602234 |
Details available
Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.
Published: 2014-05-31T10:00:00.000Z
Updated: 2024-08-06T09:05:39.129Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0099 |
vulnerable | 2026-06-08 05:05:11.441181 |
Details available
Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
Published: 2014-05-31T10:00:00.000Z
Updated: 2024-08-06T09:05:38.296Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0096 |
vulnerable | 2026-06-08 05:05:11.414648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0075 |
vulnerable | 2026-06-08 05:05:11.164571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4590 |
vulnerable | 2026-06-08 05:04:48.570536 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4322 |
vulnerable | 2026-06-08 05:04:35.494651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4286 |
vulnerable | 2026-06-08 05:04:35.208921 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5887 |
vulnerable | 2026-06-08 05:02:58.577095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5886 |
vulnerable | 2026-06-08 05:02:58.574422 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5885 |
vulnerable | 2026-06-08 05:02:58.563936 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4534 |
vulnerable | 2026-06-08 05:02:51.271686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4431 |
vulnerable | 2026-06-08 05:02:17.498389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3546 |
vulnerable | 2026-06-08 05:02:10.600446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3544 |
vulnerable | 2026-06-08 05:02:10.589118 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2733 |
vulnerable | 2026-06-08 05:02:05.859571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0022 |
vulnerable | 2026-06-08 04:59:35.594146 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5064 |
vulnerable | 2026-06-08 04:59:34.397901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5063 |
vulnerable | 2026-06-08 04:59:34.395684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5062 |
vulnerable | 2026-06-08 04:59:34.393097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3190 |
vulnerable | 2026-06-08 04:58:10.984536 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2526 |
vulnerable | 2026-06-08 04:58:07.431886 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2204 |
vulnerable | 2026-06-08 04:58:04.801798 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1184 |
vulnerable | 2026-06-08 04:57:56.792976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0013 |
vulnerable | 2026-06-08 04:56:33.156868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4312 |
vulnerable | 2026-06-08 04:55:19.772868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3718 |
vulnerable | 2026-06-08 04:55:16.579760 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3548 |
vulnerable | 2026-06-08 04:51:42.555519 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2902 |
vulnerable | 2026-06-08 04:51:31.253519 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2901 |
vulnerable | 2026-06-08 04:51:31.251205 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2693 |
vulnerable | 2026-06-08 04:51:30.034181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0781 |
vulnerable | 2026-06-08 04:51:11.316950 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5515 |
vulnerable | 2026-06-08 04:50:51.717927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5342 |
vulnerable | 2026-06-08 04:50:04.894082 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.