#Apache tomcat 7.0.59 code#

#Apache tomcat 7.0.59 code#

This JSP could then be requested and any code it contained would be executed by the server. Dear Sirs, To communicate you a behaviour with Apache Tomcat 7.0.59 Apache Tomcat 7.0.59 is running with: - RHEL6.6 - java jdk 1.8.0.74 - OpenSSL 1.0. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. When running Tomcat primarily as a Servlet/JSP container behind another web server, such as Apache or Microsoft IIS, it is usually necessary to configure the primary web server to handle the SSL connections from users. This can result in remote code execution in the context of the affected service. A remote attacker can exploit this vulnerability by uploading a specially crafted JSP page to the vulnerable server. This signature detects attempts to exploit a known vulnerability in Apache Tomcat running on Windows. HTTP: Apache Tomcat HTTP PUT Windows Remote Code Execution

which must be unique across all Tomcat servers which participate in the cluster, will be appended.

Apache Tomcat HTTP PUT Windows Remote Code Execution