Apache Tomcat Server is running on this host and that is prone to Privilege Escalation vulnerability.

Successful attempt could lead remote attackers to bypass security restrictions and gain the privileges. Impact Level: Application.

Apply patch from below link, http://svn.apache.org/viewvc?view=revision&revision=834047 ***** NOTE: Ignore this warning if above mentioned patch is already applied. *****

The flaw is due to the windows installer setting a blank password by default for the administrative user, which could be exploited by attackers to gain unauthorized administrative access to a vulnerable installation.

Apache Tomcat version 5.5.0 to 5.5.28 and 6.0.0 through 6.0.20 on Windows.

• http://securitytracker.com/alerts/2009/Nov/1023146.html
• http://tomcat.apache.org/security-5.html
• http://tomcat.apache.org/security-6.html
• http://www.vupen.com/english/advisories/2009/3185

---

Updated on 2015-03-25