CVE-2009-0783
Detail
Deferred
This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.
Description
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
Vector:
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0 Severity and Vector Strings:
Vector:
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected] .
URL
Source(s)
Tag(s)
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
CVE, Inc., Red Hat
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
CVE, Inc., Red Hat
Third Party Advisory
http://marc.info/?l=bugtraq&m=127420533226623&w=2
CVE, Inc., Red Hat
Third Party Advisory
http://marc.info/?l=bugtraq&m=129070310906557&w=2
CVE, Inc., Red Hat
Third Party Advisory
http://marc.info/?l=bugtraq&m=136485229118404&w=2
CVE, Inc., Red Hat
Third Party Advisory
http://secunia.com/advisories/35685
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/35788
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/37460
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/42368
CVE, Inc., Red Hat
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1
CVE, Inc., Red Hat
Third Party Advisory
http://support.apple.com/kb/HT4077
CVE, Inc., Red Hat
Third Party Advisory
http://svn.apache.org/viewvc?rev=652592&view=rev
CVE, Inc., Red Hat
Patch
http://svn.apache.org/viewvc?rev=681156&view=rev
CVE, Inc., Red Hat
Patch
http://svn.apache.org/viewvc?rev=739522&view=rev
CVE, Inc., Red Hat
Patch
http://svn.apache.org/viewvc?rev=781542&view=rev
CVE, Inc., Red Hat
Patch
http://svn.apache.org/viewvc?rev=781708&view=rev
CVE, Inc., Red Hat
Patch
http://tomcat.apache.org/security-4.html
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://tomcat.apache.org/security-5.html
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://tomcat.apache.org/security-6.html
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://www.debian.org/security/2011/dsa-2207
CVE, Inc., Red Hat
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:136
CVE, Inc., Red Hat
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:138
CVE, Inc., Red Hat
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:176
CVE, Inc., Red Hat
Third Party Advisory
http://www.securityfocus.com/archive/1/504090/100/0/threaded
CVE, Inc., Red Hat
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/507985/100/0/threaded
CVE, Inc., Red Hat
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/35416
CVE, Inc., Red Hat
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022336
CVE, Inc., Red Hat
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
CVE, Inc., Red Hat
Third Party Advisory
http://www.vupen.com/english/advisories/2009/1856
CVE, Inc., Red Hat
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3316
CVE, Inc., Red Hat
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3056
CVE, Inc., Red Hat
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51195
CVE, Inc., Red Hat
VDB Entry
https://issues.apache.org/bugzilla/show_bug.cgi?id=29936
CVE, Inc., Red Hat
Issue Tracking
Patch
https://issues.apache.org/bugzilla/show_bug.cgi?id=45933
CVE, Inc., Red Hat
Issue Tracking
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
CVE, Inc., Red Hat
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
CVE, Inc., Red Hat
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E
CVE, Inc., Red Hat
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
CVE, Inc., Red Hat
https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE, Inc., Red Hat
https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E
CVE, Inc., Red Hat
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE, Inc., Red Hat
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716
CVE, Inc., Red Hat
Tool Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913
CVE, Inc., Red Hat
Tool Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450
CVE, Inc., Red Hat
Tool Signature
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html
CVE, Inc., Red Hat
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html
CVE, Inc., Red Hat
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html
CVE, Inc., Red Hat
Third Party Advisory
Weakness Enumeration
CWE-ID
CWE Name
Source
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
NIST  
Change History
14 change records found show changes
CVE Modified by CVE 11/20/2024 8:00:54 PM
Action
Type
Old Value
New Value
Added
Reference
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
Added
Reference
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
Added
Reference
http://marc.info/?l=bugtraq&m=127420533226623&w=2
Added
Reference
http://marc.info/?l=bugtraq&m=127420533226623&w=2
Added
Reference
http://marc.info/?l=bugtraq&m=129070310906557&w=2
Added
Reference
http://marc.info/?l=bugtraq&m=129070310906557&w=2
Added
Reference
http://marc.info/?l=bugtraq&m=136485229118404&w=2
Added
Reference
http://marc.info/?l=bugtraq&m=136485229118404&w=2
Added
Reference
http://secunia.com/advisories/35685
Added
Reference
http://secunia.com/advisories/35788
Added
Reference
http://secunia.com/advisories/37460
Added
Reference
http://secunia.com/advisories/42368
Added
Reference
http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1
Added
Reference
http://support.apple.com/kb/HT4077
Added
Reference
http://svn.apache.org/viewvc?rev=652592&view=rev
Added
Reference
http://svn.apache.org/viewvc?rev=681156&view=rev
Added
Reference
http://svn.apache.org/viewvc?rev=739522&view=rev
Added
Reference
http://svn.apache.org/viewvc?rev=781542&view=rev
Added
Reference
http://svn.apache.org/viewvc?rev=781708&view=rev
Added
Reference
http://tomcat.apache.org/security-4.html
Added
Reference
http://tomcat.apache.org/security-5.html
Added
Reference
http://tomcat.apache.org/security-6.html
Added
Reference
http://www.debian.org/security/2011/dsa-2207
Added
Reference
http://www.mandriva.com/security/advisories?name=MDVSA-2009:136
Added
Reference
http://www.mandriva.com/security/advisories?name=MDVSA-2009:138
Added
Reference
http://www.mandriva.com/security/advisories?name=MDVSA-2010:176
Added
Reference
http://www.securityfocus.com/archive/1/504090/100/0/threaded
Added
Reference
http://www.securityfocus.com/archive/1/507985/100/0/threaded
Added
Reference
http://www.securityfocus.com/bid/35416
Added
Reference
http://www.securitytracker.com/id?1022336
Added
Reference
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
Added
Reference
http://www.vupen.com/english/advisories/2009/1856
Added
Reference
http://www.vupen.com/english/advisories/2009/3316
Added
Reference
http://www.vupen.com/english/advisories/2010/3056
Added
Reference
https://exchange.xforce.ibmcloud.com/vulnerabilities/51195
Added
Reference
https://issues.apache.org/bugzilla/show_bug.cgi?id=29936
Added
Reference
https://issues.apache.org/bugzilla/show_bug.cgi?id=45933
Added
Reference
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
Added
Reference
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
Added
Reference
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E
Added
Reference
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
Added
Reference
https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
Added
Reference
https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E
Added
Reference
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450
Added
Reference
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html
Added
Reference
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html
Added
Reference
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html
CVE Modified by Red Hat, Inc. 5/13/2024 10:04:56 PM
Action
Type
Old Value
New Value
CVE Modified by Red Hat, Inc. 2/12/2023 8:17:10 PM
Action
Type
Old Value
New Value
Added
Reference
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Added
Reference
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Added
Reference
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Added
Reference
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Added
Reference
https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Added
Reference
https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Added
Reference
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Removed
Reference
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E [Vendor Advisory]
Removed
Reference
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E [Vendor Advisory]
Removed
Reference
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E [Vendor Advisory]
Removed
Reference
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E [Vendor Advisory]
Removed
Reference
https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Removed
Reference
https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Removed
Reference
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E [No Types Assigned]
CVE Modified by Red Hat, Inc. 2/13/2020 12:15:19 PM
Action
Type
Old Value
New Value
Added
Reference
https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Added
Reference
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E [No Types Assigned]
CVE Modified by Red Hat, Inc. 2/03/2020 7:15:15 AM
Action
Type
Old Value
New Value
Added
Reference
https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Modified Analysis by NIST 9/27/2019 2:00:29 PM
Action
Type
Old Value
New Value
Changed
CPE Configuration
Record truncated, showing 2048 of 4409 characters.
View Entire Change Record
OR
*cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.38:*:*:*:*:*:*:*
*cpe:2.3:a:apache:tomcat:4.1.39:*:*:*:*:*:*:*
*cpe:2.3:a
OR
*cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 4.1.0 up to (including) 4.1.39
*cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 5.5.0 up to (including) 5.5.27
*cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 6.0.0 up to (including) 6.0.18
Changed
Reference Type
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html No Types Assigned
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html Mailing List
Changed
Reference Type
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html No Types Assigned
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html Third Party Advisory
Changed
Reference Type
http://marc.info/?l=bugtraq&m=127420533226623&w=2 No Types Assigned
http://marc.info/?l=bugtraq&m=127420533226623&w=2 Third Party Advisory
Changed
Reference Type
http://marc.info/?l=bugtraq&m=129070310906557&w=2 No Types Assigned
http://marc.info/?l=bugtraq&m=129070310906557&w=2 Third Party Advisory
Changed
Reference Type
http://marc.info/?l=bugtraq&m=136485229118404&w=2 No Types Assigned
http://marc.info/?l=bugtraq&m=136485229118404&w=2 Third Party Advisory
Changed
Reference Type
http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1 No Types Assigned
http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1 Third Party Advisory
Changed
Reference Type
http://support.apple.com/kb/HT4077 No Types Assigned
http://support.apple.com/kb/HT4077 Third Party Advisory
Changed
Reference Type
http://www.debian.org/security/2011/dsa-2207 No Types Assigned
http://www.debian.org/security/2011/dsa-2207 Third Party Advisory
Changed
Reference Type
http://www.mandriva.com/security/advisories?name=MDVSA-2009:136 No Types Assigned
http://www.mandriva.com/security/advisories?name=MDVSA-2009:136 Third Party Advisory
Changed
Reference Type
http://www.mandriva.com/security/advisories?name=MDVSA-2009:138 No Types Assigned
http://www.mandriva.com/security/advisories?name=MDVSA-2009:138 Third Party Advisory
Changed
Reference Type
http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 No Types Assigned
http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 Third Party Advisory
Changed
Reference Type
http://www.securityfocus.com/archive/1/504090/100/0/threaded No Types Assigned
http://www.securityfocus.com/archive/1/504090/100/0/threaded Third Party Advisory, VDB Entry
Changed
Reference Type
http://www.securityfocus.com/archive/1/507985/100/0/threaded No Types Assigned
http://www.securityfocus.com/archive/1/507985/100/0/threaded Third Party Advisory, VDB Entry
Changed
Reference Type
http://www.securityfocus.com/bid/35416 No Types Assigned
http://www.securityfocus.com/bid/35416 Third Party Advisory, VDB Entry
Changed
Reference Type
http://www.securitytracker.com/id?1022336 No Types Assigned
http://www.securitytracker.com/id?1022336 Third Party Advisory, VDB Entry
Changed
Reference Type
http://www.vmware.com/security/advisories/VMSA-2009-0016.html No Types Assigned
http://www.vmware.com/security/advisories/VMSA-2009-0016.html Third Party Advisory
Changed
Reference Type
https://exchange.xforce.ibmcloud.com/vulnerabilities/51195 No Types Assigned
https://exchange.xforce.ibmcloud.com/vulnerabilities/51195 VDB Entry
Changed
Reference Type
https://issues.apache.org/bugzilla/show_bug.cgi?id=29936 Patch
https://issues.apache.org/bugzilla/show_bug.cgi?id=29936 Issue Tracking, Patch
Changed
Reference Type
https://issues.apache.org/bugzilla/show_bug.cgi?id=45933 No Types Assigned
https://issues.apache.org/bugzilla/show_bug.cgi?id=45933 Issue Tracking
Changed
Reference Type
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E Vendor Advisory
Changed
Reference Type
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E Vendor Advisory
Changed
Reference Type
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E Vendor Advisory
Changed
Reference Type
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E Vendor Advisory
Changed
Reference Type
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716 No Types Assigned
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716 Tool Signature
Changed
Reference Type
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913 No Types Assigned
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913 Tool Signature
Changed
Reference Type
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450 No Types Assigned
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450 Tool Signature
Changed
Reference Type
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html No Types Assigned
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html Third Party Advisory
Changed
Reference Type
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html No Types Assigned
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html Third Party Advisory
Changed
Reference Type
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html No Types Assigned
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html Third Party Advisory
CVE Modified by Red Hat, Inc. 3/25/2019 7:30:49 AM
Action
Type
Old Value
New Value
Added
Reference
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Added
Reference
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E [No Types Assigned]
CVE Modified by Red Hat, Inc. 3/21/2019 11:42:53 AM
Action
Type
Old Value
New Value
Added
Reference
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E [No Types Assigned]
Added
Reference
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E [No Types Assigned]
CVE Modified by Red Hat, Inc. 10/10/2018 3:31:09 PM
Action
Type
Old Value
New Value
Added
Reference
http://www.securityfocus.com/archive/1/504090/100/0/threaded [No Types Assigned]
Added
Reference
http://www.securityfocus.com/archive/1/507985/100/0/threaded [No Types Assigned]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/504090/100/0/threaded [Patch]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/507985/100/0/threaded [No Types Assigned]
CVE Modified by Red Hat, Inc. 9/28/2017 9:34:02 PM
Action
Type
Old Value
New Value
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716 [No Types Assigned]
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913 [No Types Assigned]
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450 [No Types Assigned]
Removed
Reference
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10716 [No Types Assigned]
Removed
Reference
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:18913 [No Types Assigned]
Removed
Reference
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6450 [No Types Assigned]
CVE Modified by Red Hat, Inc. 8/16/2017 9:30:00 PM
Action
Type
Old Value
New Value
Added
Reference
https://exchange.xforce.ibmcloud.com/vulnerabilities/51195 [No Types Assigned]
Removed
Reference
http://xforce.iss.net/xforce/xfdb/51195 [No Types Assigned]
CVE Modified by Red Hat, Inc. 8/22/2016 9:59:38 PM
Action
Type
Old Value
New Value
Added
Reference
http://marc.info/?l=bugtraq&m=127420533226623&w=2
Modified Analysis by NIST 6/24/2016 11:14:57 AM
Action
Type
Old Value
New Value
Added
CVSS V3
AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Initial CVE Analysis 6/08/2009 8:50:00 AM
Action
Type
Old Value
New Value
Quick Info
CVE Dictionary Entry: CVE-2009-0783 NVD
Published Date: 06/05/2009 NVD
Last Modified: 04/08/2025
Source: Red Hat, Inc.