VulnerableCode Package Details - pkg:apache/tomcat@5.5.29

Search for packages

Vulnerability	Summary	Fixed by
VCID-ag6j-eqm7-aaam Aliases: CVE-2010-2227 GHSA-cxg2-49rq-8gcr	CVE-2010-2227 tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header	5.5.30 Affected by 0 other vulnerabilities. 6.0.28 Affected by 0 other vulnerabilities. 7.0.1 Affected by 69 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 7.0.2 Affected by 69 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-gcak-7hnb-aaad Aliases: CVE-2010-1157 GHSA-w6q7-ww2x-7gm3	CVE-2010-1157 tomcat: information disclosure in authentication headers	5.5.30 Affected by 0 other vulnerabilities. 6.0.28 Affected by 0 other vulnerabilities.
VCID-gyt6-3ggt-aaaj Aliases: CVE-2010-3718 GHSA-fj6c-prgj-gr3r	CVE-2010-3718 tomcat: file permission bypass flaw	5.5.30 Affected by 0 other vulnerabilities. 6.0.30 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 7.0.4 Affected by 68 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-ag6j-eqm7-aaam
Aliases:
CVE-2010-2227
GHSA-cxg2-49rq-8gcr

CVE-2010-2227 tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header

5.5.30
Affected by 0 other vulnerabilities.

6.0.28
Affected by 0 other vulnerabilities.

7.0.1
Affected by 69 other vulnerabilities.

7.0.2
Affected by 69 other vulnerabilities.

VCID-gcak-7hnb-aaad
Aliases:
CVE-2010-1157
GHSA-w6q7-ww2x-7gm3

CVE-2010-1157 tomcat: information disclosure in authentication headers

5.5.30
Affected by 0 other vulnerabilities.

6.0.28
Affected by 0 other vulnerabilities.

VCID-gyt6-3ggt-aaaj
Aliases:
CVE-2010-3718
GHSA-fj6c-prgj-gr3r

CVE-2010-3718 tomcat: file permission bypass flaw

5.5.30
Affected by 0 other vulnerabilities.

6.0.30
Affected by 4 other vulnerabilities.

7.0.4
Affected by 68 other vulnerabilities.

Vulnerability	Summary	Aliases
VCID-9hhz-11ph-aaan	The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.	CVE-2009-3548
VCID-kg1r-u6pn-aaak	CVE-2009-2902 tomcat: unexpected file deletion in work directory	CVE-2009-2902 GHSA-8wch-9gcg-v2pr
VCID-x2d7-89h7-aaac	Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.	CVE-2009-2693 GHSA-ggx9-4728-588r
VCID-z4zw-kc9e-aaas	CVE-2009-2901 tomcat: insecure partial deploy after failed undeploy	CVE-2009-2901 GHSA-hjfh-7c4v-7q8h

Vulnerability

Summary

Aliases

VCID-9hhz-11ph-aaan

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.

CVE-2009-3548

VCID-kg1r-u6pn-aaak

CVE-2009-2902 tomcat: unexpected file deletion in work directory

CVE-2009-2902
GHSA-8wch-9gcg-v2pr

VCID-x2d7-89h7-aaac

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.

CVE-2009-2693
GHSA-ggx9-4728-588r

VCID-z4zw-kc9e-aaas

CVE-2009-2901 tomcat: insecure partial deploy after failed undeploy

CVE-2009-2901
GHSA-hjfh-7c4v-7q8h

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-03-28T13:19:36.860608+00:00	Apache Tomcat Importer	Fixing	VCID-9hhz-11ph-aaan	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:36.808881+00:00	Apache Tomcat Importer	Fixing	VCID-kg1r-u6pn-aaak	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:36.757404+00:00	Apache Tomcat Importer	Fixing	VCID-z4zw-kc9e-aaas	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:36.701010+00:00	Apache Tomcat Importer	Fixing	VCID-x2d7-89h7-aaac	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:36.639569+00:00	Apache Tomcat Importer	Affected by	VCID-gcak-7hnb-aaad	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:36.582400+00:00	Apache Tomcat Importer	Affected by	VCID-ag6j-eqm7-aaam	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:36.529874+00:00	Apache Tomcat Importer	Affected by	VCID-gyt6-3ggt-aaaj	https://tomcat.apache.org/security-5.html	36.0.0
2024-09-18T08:17:46.798284+00:00	Apache Tomcat Importer	Fixing	VCID-9hhz-11ph-aaan	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:46.749965+00:00	Apache Tomcat Importer	Fixing	VCID-kg1r-u6pn-aaak	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:46.701204+00:00	Apache Tomcat Importer	Fixing	VCID-z4zw-kc9e-aaas	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:46.651920+00:00	Apache Tomcat Importer	Fixing	VCID-x2d7-89h7-aaac	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:46.598159+00:00	Apache Tomcat Importer	Affected by	VCID-gcak-7hnb-aaad	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:46.547073+00:00	Apache Tomcat Importer	Affected by	VCID-ag6j-eqm7-aaam	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:46.485192+00:00	Apache Tomcat Importer	Affected by	VCID-gyt6-3ggt-aaaj	https://tomcat.apache.org/security-5.html	34.0.1
2024-01-04T02:15:49.903315+00:00	Apache Tomcat Importer	Fixing	VCID-9hhz-11ph-aaan	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:49.852844+00:00	Apache Tomcat Importer	Fixing	VCID-kg1r-u6pn-aaak	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:49.801623+00:00	Apache Tomcat Importer	Fixing	VCID-z4zw-kc9e-aaas	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:49.750724+00:00	Apache Tomcat Importer	Fixing	VCID-x2d7-89h7-aaac	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:49.692771+00:00	Apache Tomcat Importer	Affected by	VCID-gcak-7hnb-aaad	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:49.634688+00:00	Apache Tomcat Importer	Affected by	VCID-ag6j-eqm7-aaam	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:49.580957+00:00	Apache Tomcat Importer	Affected by	VCID-gyt6-3ggt-aaaj	https://tomcat.apache.org/security-5.html	34.0.0rc1