[SECURITY] CVE-2016-6796 Apache Tomcat Security Manager Bypass

2016-10-27 Thread Mark Thomas
CVE-2016-6796 Apache Tomcat Security Manager Bypass Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.0.M9 Apache Tomcat 8.5.0 to 8.5.4 Apache Tomcat 8.0.0.RC1 to 8.0.36 Apache Tomcat 7.0.0 to 7.0.70 Apache Tomcat 6.0.0 to 6.0.45 Earlier

[SECURITY] CVE-2016-5018 Apache Tomcat Security Manager Bypass

2016-10-27 Thread Mark Thomas
CVE-2016-5018 Apache Tomcat Security Manager Bypass Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.0.M9 Apache Tomcat 8.5.0 to 8.5.4 Apache Tomcat 8.0.0.RC1 to 8.0.36 Apache Tomcat 7.0.0 to 7.0.70 Apache Tomcat 6.0.0 to 6.0.45 Earlier

Re: [SECURITY] CVE-2016-0763 Apache Tomcat Security Manager Bypass

2016-03-22 Thread Chris Patterson
El 22/02/2016 a las 06:23 a.m., Mark Thomas escribió: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2016-0763 Apache Tomcat Security Manager Bypass Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 7.0.0 to 7.0.67 - - Apache Tomcat 8.0.0

[SECURITY] CVE-2016-0706 Apache Tomcat Security Manager bypass

2016-02-22 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2016-0706 Apache Tomcat Security Manager bypass Severity: Low Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 6.0.0 to 6.0.44 - - Apache Tomcat 7.0.0 to 7.0.67 - - Apache Tomcat 8.0.0.RC1 to 8.0.30 - - Apache

[SECURITY] CVE-2016-0714 Apache Tomcat Security Manager Bypass

2016-02-22 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2016-0714 Apache Tomcat Security Manager Bypass Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 6.0.0 to 6.0.44 - - Apache Tomcat 7.0.0 to 7.0.67 - - Apache Tomcat 8.0.0.RC1 to 8.0.30 - - Apache

[SECURITY] CVE-2016-0763 Apache Tomcat Security Manager Bypass

2016-02-22 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2016-0763 Apache Tomcat Security Manager Bypass Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 7.0.0 to 7.0.67 - - Apache Tomcat 8.0.0.RC1 to 8.0.30 - - Apache Tomcat 9.0.0.M1 to 9.0.0.M2

[SECURITY] CVE-2014-7810: Apache Tomcat Security Manager Bypass

2015-05-14 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 CVE-2014-7810 Security Manager Bypass Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 8.0.0-RC1 to 8.0.15 - - Apache Tomcat 7.0.0 to 7.0.57 - - Apache Tomcat 6.0.0 to 6.0.43 Description: Malicious we

RE: Exception while running web application with Tomcat security manager enabled

2008-10-09 Thread Caldarale, Charles R
> From: Vijayaraghavan Amirisetty > [mailto:[EMAIL PROTECTED] > Subject: Re: Exception while running web application with > Tomcat security manager enabled > > Does the Tomcat Security Manager use any > native libraries for it's operations? No. - Chuck THIS

Re: Exception while running web application with Tomcat security manager enabled

2008-10-08 Thread Vijayaraghavan Amirisetty
L PROTECTED] >> > Subject: Exception while running web application with Tomcat >> > security manager enabled >> > >> > I am trying to run a simple webapp on tomcat 5.0 >> >> The 5.0 branch is no longer supported; can you try it on 5.5 or 6.0? > > >

Re: Exception while running web application with Tomcat security manager enabled

2008-10-08 Thread Vijayaraghavan Amirisetty
Hi Charles, The additional On Thu, Oct 9, 2008 at 1:49 AM, Caldarale, Charles R < [EMAIL PROTECTED]> wrote: > > From: Vijayaraghavan Amirisetty > > [mailto:[EMAIL PROTECTED] > > Subject: Exception while running web application with Tomcat > > security manager enab

RE: Exception while running web application with Tomcat security manager enabled

2008-10-08 Thread Caldarale, Charles R
> From: Vijayaraghavan Amirisetty > [mailto:[EMAIL PROTECTED] > Subject: Exception while running web application with Tomcat > security manager enabled > > I am trying to run a simple webapp on tomcat 5.0 The 5.0 branch is no longer supported; can you try it on 5.5 or 6.

Exception while running web application with Tomcat security manager enabled

2008-10-08 Thread Vijayaraghavan Amirisetty
hello, I am trying to run a simple webapp on tomcat 5.0 with the security manager enabled i.e with the additional options -Djava.security.manager -Djava.security.policy=%CATALINA_BASE%\conf\catalina.policy for the tomcat JVM. I get the following Stack Trace when I point the browser to my

Problems wits Tomcat security manager when connecting to Firebird using Jaybird

2007-02-02 Thread Balanyi Zsolt
Hello! I am using Tomcat 4.1 on Debian. With SecurityManager turned off, my app works perfectly. However, if I turn it on, I get some errors. I already corrected some of them by adding permissions, but this one is unclear to me: java.lang.ExceptionInInitializerError at org.firebirdsql.jdbc.F

Re: Tomcat security Manager

2006-08-21 Thread Markus Schönhaber
Mark Babcock wrote: > Does anyone know how to get tomcat 5.5 running as a windows service with > security manager enabled? Open the Tomcat Properties dialog, select the "Java" tab and under "Java Options" add the following two lines: -Djava.security.manager -Djava.security.policy=C:\Programme\Ap

Tomcat security Manager

2006-08-21 Thread Mark Babcock
Does anyone know how to get tomcat 5.5 running as a windows service with security manager enabled?