Novell openSUSE, SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3/11.4, SUSE Linux Enterprise Server (SLES) 10 (Apache Tomcat 5.x/6.x/7.x)

回避策：openSUSE-SU-2011:0988-1, SUSE-SU-2011:0989-1, SUSE-SU-2011:0990-1にて対応

脆弱性：セキュリティ制限の回避, DoS攻撃, パスワードの奪取, ファイルの曝露, JVMのクラッシュ

ソース：

http://www.opensuse.org/en/

http://www.suse.com/products/server/

https://hermes.opensuse.org/messages/11647318

https://hermes.opensuse.org/messages/11647322

https://hermes.opensuse.org/messages/11651531

http://secunia.com/advisories/44981/

http://secunia.com/advisories/45232/

http://secunia.com/advisories/45784/

http://secunia.com/advisories/45828/

http://dvw-j.blogspot.com/2011/06/apache-tomcat.html

http://dvw-j.blogspot.com/2011/07/apache-tomcat.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2204

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2526

CVE：CVE-2011-2204, CVE-2011-2526

危険性：Low Risk