Ubuntu Update for Linux kernel vulnerabilities USN-1048-1

Please Install the Updated Packages.

It was discovered that Tomcat did not properly escape certain parameters in the Manager application which could result in browsers becoming vulnerable to cross-site scripting attacks when processing the output. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data (such as passwords), within the same domain.

tomcat6 vulnerability on Ubuntu 9.10 , Ubuntu 10.04 LTS , Ubuntu 10.10

• https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-January/001234.html

---

Updated on 2015-03-25