NVD Vulnerability Detail

CVE-2010-2227

Summary	Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer."
Publication Date	July 14, 2010, 2:30 a.m.
Registration Date	Jan. 29, 2021, 11:02 a.m.
Last Update	Nov. 21, 2024, 10:16 a.m.

CVSS2.0 : MEDIUM
Score	6.4
Vector	AV:N/AC:L/Au:N/C:P/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	なし
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:apache:tomcat:5.5.27:::::::*
cpe:2.3:a:apache:tomcat:5.5.18:::::::*
cpe:2.3:a:apache:tomcat:5.5.12:::::::*
cpe:2.3:a:apache:tomcat:5.5.14:::::::*
cpe:2.3:a:apache:tomcat:5.5.10:::::::*
cpe:2.3:a:apache:tomcat:5.5.4:::::::*
cpe:2.3:a:apache:tomcat:5.5.7:::::::*
cpe:2.3:a:apache:tomcat:5.5.1:::::::*
cpe:2.3:a:apache:tomcat:5.5.11:::::::*
cpe:2.3:a:apache:tomcat:5.5.28:::::::*
cpe:2.3:a:apache:tomcat:5.5.6:::::::*
cpe:2.3:a:apache:tomcat:5.5.26:::::::*
cpe:2.3:a:apache:tomcat:5.5.20:::::::*
cpe:2.3:a:apache:tomcat:5.5.15:::::::*
cpe:2.3:a:apache:tomcat:5.5.5:::::::*
cpe:2.3:a:apache:tomcat:5.5.21:::::::*
cpe:2.3:a:apache:tomcat:5.5.22:::::::*
cpe:2.3:a:apache:tomcat:5.5.3:::::::*
cpe:2.3:a:apache:tomcat:5.5.9:::::::*
cpe:2.3:a:apache:tomcat:5.5.25:::::::*
cpe:2.3:a:apache:tomcat:5.5.2:::::::*
cpe:2.3:a:apache:tomcat:5.5.0:::::::*
cpe:2.3:a:apache:tomcat:5.5.13:::::::*
cpe:2.3:a:apache:tomcat:5.5.24:::::::*
cpe:2.3:a:apache:tomcat:5.5.8:::::::*
cpe:2.3:a:apache:tomcat:5.5.16:::::::*
cpe:2.3:a:apache:tomcat:5.5.17:::::::*
cpe:2.3:a:apache:tomcat:5.5.29:::::::*
cpe:2.3:a:apache:tomcat:5.5.19:::::::*
cpe:2.3:a:apache:tomcat:5.5.23:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:apache:tomcat:6.0.6:::::::*
cpe:2.3:a:apache:tomcat:6.0.11:::::::*
cpe:2.3:a:apache:tomcat:6.0.7:::::::*
cpe:2.3:a:apache:tomcat:6.0.4:::::::*
cpe:2.3:a:apache:tomcat:6.0.15:::::::*
cpe:2.3:a:apache:tomcat:6.0.20:::::::*
cpe:2.3:a:apache:tomcat:6.0.10:::::::*
cpe:2.3:a:apache:tomcat:6.0.3:::::::*
cpe:2.3:a:apache:tomcat:6.0.9:::::::*
cpe:2.3:a:apache:tomcat:6.0.24:::::::*
cpe:2.3:a:apache:tomcat:6.0.17:::::::*
cpe:2.3:a:apache:tomcat:6.0.0:::::::*
cpe:2.3:a:apache:tomcat:6.0.14:::::::*
cpe:2.3:a:apache:tomcat:6.0.1:::::::*
cpe:2.3:a:apache:tomcat:6.0.12:::::::*
cpe:2.3:a:apache:tomcat:6.0.18:::::::*
cpe:2.3:a:apache:tomcat:6.0.5:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:::::::*
cpe:2.3:a:apache:tomcat:6.0.13:::::::*
cpe:2.3:a:apache:tomcat:6.0.26:::::::*
cpe:2.3:a:apache:tomcat:6.0.19:::::::*
cpe:2.3:a:apache:tomcat:6.0.27:::::::*
cpe:2.3:a:apache:tomcat:6.0.16:::::::*
cpe:2.3:a:apache:tomcat:6.0.8:::::::*

Configuration3		or higher	or less	more than	less than
cpe:2.3:a:apache:tomcat:7.0.0:beta::::::

Related information, measures and tools

No	URL	タグ
1	http://geronimo.apache.org/21x-security-report.html
2	http://geronimo.apache.org/21x-security-report.html
3	http://geronimo.apache.org/22x-security-report.html
4	http://geronimo.apache.org/22x-security-report.html
5	http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
6	http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
7	http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050207.html
8	http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050207.html
9	http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050214.html
10	http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050214.html
11	http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
12	http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
13	http://marc.info/?l=bugtraq&m=129070310906557&w=2
14	http://marc.info/?l=bugtraq&m=129070310906557&w=2
15	http://marc.info/?l=bugtraq&m=129070310906557&w=2
16	http://marc.info/?l=bugtraq&m=129070310906557&w=2
17	http://marc.info/?l=bugtraq&m=136485229118404&w=2
18	http://marc.info/?l=bugtraq&m=136485229118404&w=2
19	http://marc.info/?l=bugtraq&m=136485229118404&w=2
20	http://marc.info/?l=bugtraq&m=136485229118404&w=2
21	http://marc.info/?l=bugtraq&m=139344343412337&w=2
22	http://marc.info/?l=bugtraq&m=139344343412337&w=2
23	http://secunia.com/advisories/40813
24	http://secunia.com/advisories/40813
25	http://secunia.com/advisories/41025
26	http://secunia.com/advisories/41025
27	http://secunia.com/advisories/42079
28	http://secunia.com/advisories/42079
29	http://secunia.com/advisories/42368
30	http://secunia.com/advisories/42368
31	http://secunia.com/advisories/42454
32	http://secunia.com/advisories/42454
33	http://secunia.com/advisories/43310
34	http://secunia.com/advisories/43310
35	http://secunia.com/advisories/44183
36	http://secunia.com/advisories/44183
37	http://secunia.com/advisories/57126
38	http://secunia.com/advisories/57126
39	http://securitytracker.com/id?1024180
40	http://securitytracker.com/id?1024180
41	http://support.apple.com/kb/HT5002
42	http://support.apple.com/kb/HT5002
43	http://svn.apache.org/viewvc?view=revision&revision=958911	Patch
44	http://svn.apache.org/viewvc?view=revision&revision=958911	Patch
45	http://svn.apache.org/viewvc?view=revision&revision=958977	Patch
46	http://svn.apache.org/viewvc?view=revision&revision=958977	Patch
47	http://svn.apache.org/viewvc?view=revision&revision=959428	Patch
48	http://svn.apache.org/viewvc?view=revision&revision=959428	Patch
49	http://tomcat.apache.org/security-5.html	Vendor Advisory
50	http://tomcat.apache.org/security-5.html	Vendor Advisory
51	http://tomcat.apache.org/security-6.html	Vendor Advisory
52	http://tomcat.apache.org/security-6.html	Vendor Advisory
53	http://tomcat.apache.org/security-7.html	Vendor Advisory
54	http://tomcat.apache.org/security-7.html	Vendor Advisory
55	http://www.debian.org/security/2011/dsa-2207
56	http://www.debian.org/security/2011/dsa-2207
57	http://www.mandriva.com/security/advisories?name=MDVSA-2010:176
58	http://www.mandriva.com/security/advisories?name=MDVSA-2010:176
59	http://www.mandriva.com/security/advisories?name=MDVSA-2010:177
60	http://www.mandriva.com/security/advisories?name=MDVSA-2010:177
61	http://www.novell.com/support/viewContent.do?externalId=7007274
62	http://www.novell.com/support/viewContent.do?externalId=7007274
63	http://www.novell.com/support/viewContent.do?externalId=7007275
64	http://www.novell.com/support/viewContent.do?externalId=7007275
65	http://www.redhat.com/support/errata/RHSA-2010-0580.html
66	http://www.redhat.com/support/errata/RHSA-2010-0580.html
67	http://www.redhat.com/support/errata/RHSA-2010-0581.html
68	http://www.redhat.com/support/errata/RHSA-2010-0581.html
69	http://www.redhat.com/support/errata/RHSA-2010-0582.html
70	http://www.redhat.com/support/errata/RHSA-2010-0582.html
71	http://www.redhat.com/support/errata/RHSA-2010-0583.html
72	http://www.redhat.com/support/errata/RHSA-2010-0583.html
73	http://www.securityfocus.com/archive/1/512272/100/0/threaded
74	http://www.securityfocus.com/archive/1/512272/100/0/threaded
75	http://www.securityfocus.com/archive/1/516397/100/0/threaded
76	http://www.securityfocus.com/archive/1/516397/100/0/threaded
77	http://www.securityfocus.com/bid/41544
78	http://www.securityfocus.com/bid/41544
79	http://www.vmware.com/security/advisories/VMSA-2011-0003.html
80	http://www.vmware.com/security/advisories/VMSA-2011-0003.html
81	http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
82	http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
83	http://www.vupen.com/english/advisories/2010/1986
84	http://www.vupen.com/english/advisories/2010/1986
85	http://www.vupen.com/english/advisories/2010/2868
86	http://www.vupen.com/english/advisories/2010/2868
87	http://www.vupen.com/english/advisories/2010/3056
88	http://www.vupen.com/english/advisories/2010/3056
89	https://exchange.xforce.ibmcloud.com/vulnerabilities/60264
90	https://exchange.xforce.ibmcloud.com/vulnerabilities/60264
91	https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
92	https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
93	https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E
94	https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E
95	https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
96	https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
97	https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E
98	https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E
99	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18532
100	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18532

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

Apache Tomcat における重要な情報を取得される脆弱性

Title	Apache Tomcat における重要な情報を取得される脆弱性
Summary	Apache Tomcat には、不正な Transfer-Encoding ヘッダを適切に処理しないため、サービス運用妨害 (DoS) 状態となる、または重要な情報を取得される脆弱性が存在します。
Possible impacts	第三者により、バッファのリサイクルに干渉する巧妙に細工されたヘッダを介して、サービス運用妨害 (DoS) 状態にされる、または重要な情報を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	July 13, 2010, midnight
Registration Date	July 29, 2010, 6:54 p.m.
Last Update	March 25, 2015, 5:51 p.m.

Affected System

レッドハット

Red Hat Enterprise Linux 5 (server)

Red Hat Enterprise Linux Desktop 5.0 (client)

RHEL Desktop Workstation 5 (client)

ヒューレット・パッカード

HP Systems Insight Manager 7.0 未満

HP XP P9000 Performance Advisor ソフトウェア 5.4.1 およびそれ以前

HP-UX Tomcat-based Servlet Engine 5.5.30.01 未満

Apache Software Foundation

Apache Tomcat 5.5.0 から 5.5.29

Apache Tomcat 6.0.0 から 6.0.27

Apache Tomcat 7.0.0

トレンドマイクロ

TrendMicro InterScan Web Security Suite 3.1 Solaris版

オラクル

OpenSolaris

Oracle Solaris 10

Oracle Solaris 9

サイバートラスト株式会社

Asianux Server 3 (x86)

Asianux Server 3 (x86-64)

アップル

Apple Mac OS X 10.6.8

Apple Mac OS X Server 10.6.8

日本電気

WebOTX Application Server V8.31

VMware

VMware ESX 3.0.3

VMware ESX 3.5

VMware ESX 4.0

VMware ESX 4.1

VMware vCenter 4.0

VMware vCenter 4.1

VMware VirtualCenter 2.5

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-2227	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2227
National Vulnerability Database (NVD)
2	CVE-2010-2227	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2227

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Apache Geronimo
1	Fixed in Geronimo 2.1.7: CVE-2010-2227: Apache Tomcat Remote Denial Of Service and Information Disclosure Vulnerability	http://geronimo.apache.org/21x-security-report.html
2	Fixed in Geronimo 2.2.1: CVE-2010-2227: Apache Tomcat Remote Denial Of Service and Information Disclosure Vulnerability	http://geronimo.apache.org/22x-security-report.html
Apache Software Foundation
3	security-5	http://tomcat.apache.org/security-5.html#Fixed_in_Apache_Tomcat_5.5.30
4	security-6	http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.28
5	security-7	http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.2
Apache-SVN
6	958911	http://svn.apache.org/viewvc?view=revision&revision=958911
7	958977	http://svn.apache.org/viewvc?view=revision&revision=958977
8	959428	http://svn.apache.org/viewvc?view=revision&revision=959428
Apple Mailing Lists
9	APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006	http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
Apple Security Updates
10	HT202348	http://support.apple.com/en-us/HT202348
Apple セキュリティアップデート
11	HT202348	http://support.apple.com/ja-jp/HT202348
Asianux Technical Support Network
12	tomcat5-5.5.23-0jpp.9.0.1.AXS3	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=1222
Hewlett Packard
13	HPUXWSATW313	https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXWSATW313
HP Security Bulletin
14	HPSBMU02769 SSRT100846	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03298151
15	HPSBST02955 SSRT101157	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c04047415
16	HPSBUX02579 SSRT100203	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02515878
17	HPSBUX02860 SSRT101146	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c03716627
Knowledgebase
18	7007274	http://www.novell.com/support/kb/doc.php?id=7007274
19	7007275	https://www.novell.com/support/kb/doc.php?id=7007275
NEC製品セキュリティ情報
20	NV12-002	http://www.nec.co.jp/security-info/secinfo/nv12-002.html
Red Hat Security Advisory
21	RHSA-2010:0580	https://rhn.redhat.com/errata/RHSA-2010-0580.html
22	RHSA-2010:0581	https://rhn.redhat.com/errata/RHSA-2010-0581.html
23	RHSA-2010:0582	https://rhn.redhat.com/errata/RHSA-2010-0582.html
24	RHSA-2010:0583	https://rhn.redhat.com/errata/RHSA-2010-0583.html
SECURITY BLOG
25	Multiple Vulnerabilities in Apache Tomcat	https://blogs.oracle.com/sunsecurity/entry/cve_2009_2902_cve_2009
26	Multiple vulnerabilities in Oracle Java Web Console	https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_oracle_java1
Trend Micro
27	fragment-144	http://downloadcenter.trendmicro.com/index.php?prodid=34#fragment-144
Trend Micro ReadMe Documentation
28	iwss_31_sol_en_patch2_readme	http://www.trendmicro.com/ftp/documentation/readme/iwss_31_sol_en_patch2_readme.txt
VMware
29	VMware vCenter Server 4.1 Update 1 Release Notes	https://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
VMware Security Advisories
30	VMSA-2011-0003	http://www.vmware.com/security/advisories/VMSA-2011-0003.html
トレンドマイクロ Q&Aページ
31	JP-2079264	http://esupport.trendmicro.co.jp/Pages/JP-2079264.aspx
トレンドマイクロサポート情報
32	Readme_IWSS_31_JP_Patch2	http://www.trendmicro.com/ftp/jp/ucmodule/iwss/sol/31/Patch2/Readme_IWSS_31_JP_Patch2.txt
トレンドマイクロダウンロード
33	fragment-3406	http://downloadcenter.trendmicro.com/index.php?regs=jp&clk=latest&clkval=3386&lang_loc=13#fragment-3406

その他

No	Name	URL
ISS X-Force Database
1	60264	http://xforce.iss.net/xforce/xfdb/60264
Secunia Advisory
2	SA39574	http://secunia.com/advisories/39574
SecurityFocus
3	41544	http://www.securityfocus.com/bid/41544
SecurityTracker
4	1024180	http://securitytracker.com/id?1024180
VUPEN Security
5	VUPEN/ADV-2010-1788	http://www.vupen.com/english/advisories/2010/1788

Change Log

No	Changed Details	Date of change
0	[2010年07月29日] 掲載 [2010年08月18日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新影響を受けるシステム：レッドハット (RHSA-2010:0580) の情報を追加ベンダ情報：ミラクル・リナックス (tomcat5-5.5.23-0jpp.9.0.1.AXS3) を追加ベンダ情報：レッドハット (RHSA-2010:0580) を追加 [2010年09月01日] ベンダ情報：Apache Software Foundation (security-7) を追加 [2010年10月29日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Multiple Vulnerabilities in Apache Tomcat) を追加 [2010年12月13日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：ヒューレット・パッカード (HPUXWSATW313) を追加ベンダ情報：ヒューレット・パッカード (HPSBUX02579 SSRT100203) を追加 [2011年02月28日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：VMware (VMSA-2011-0003) を追加 [2011年06月10日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：トレンドマイクロ (iwss_31_sol_en_patch2_readme) を追加ベンダ情報：トレンドマイクロ (fragment-144) を追加ベンダ情報：トレンドマイクロ (Readme_IWSS_31_JP_Patch2) を追加ベンダ情報：トレンドマイクロ (fragment-3406) を追加ベンダ情報：トレンドマイクロ (JP-2079264) を追加 [2012年02月13日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日本電気 (NV12-002) を追加 [2012年09月28日] ベンダ情報：オラクル (Multiple vulnerabilities in Oracle Java Web Console) を追加 [2013年03月14日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：ヒューレット・パッカード (HPSBMU02769 SSRT100846) を追加 [2015年03月25日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：Apache Software Foundation (Fixed in Geronimo 2.2.1: CVE-2010-2227: Apache Tomcat Remote Denial Of Service and Information Disclosure Vulnerability) を追加ベンダ情報：Apache Software Foundation (Fixed in Geronimo 2.1.7: CVE-2010-2227: Apache Tomcat Remote Denial Of Service and Information Disclosure Vulnerability) を追加ベンダ情報：Novell (7007274) を追加ベンダ情報：Novell (7007275) を追加ベンダ情報：VMware (VMware vCenter Server 4.1 Update 1 Release Notes) を追加ベンダ情報：アップル (APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006) を追加ベンダ情報：アップル (HT202348) を追加ベンダ情報：ヒューレット・パッカード (HPSBUX02860 SSRT101146) を追加ベンダ情報：ヒューレット・パッカード (HPSBST02955 SSRT101157) を追加ベンダ情報：ヒューレット・パッカード (HPSBUX02579 SSRT100203) を追加ベンダ情報：レッドハット (RHSA-2010:0581) を追加ベンダ情報：レッドハット (RHSA-2010:0582) を追加ベンダ情報：レッドハット (RHSA-2010:0583) を追加	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:apache:tomcat:5.5.27:::::::*
cpe:2.3:a:apache:tomcat:5.5.18:::::::*
cpe:2.3:a:apache:tomcat:5.5.12:::::::*
cpe:2.3:a:apache:tomcat:5.5.14:::::::*
cpe:2.3:a:apache:tomcat:5.5.10:::::::*
cpe:2.3:a:apache:tomcat:5.5.4:::::::*
cpe:2.3:a:apache:tomcat:5.5.7:::::::*
cpe:2.3:a:apache:tomcat:5.5.1:::::::*
cpe:2.3:a:apache:tomcat:5.5.11:::::::*
cpe:2.3:a:apache:tomcat:5.5.28:::::::*
cpe:2.3:a:apache:tomcat:5.5.6:::::::*
cpe:2.3:a:apache:tomcat:5.5.26:::::::*
cpe:2.3:a:apache:tomcat:5.5.20:::::::*
cpe:2.3:a:apache:tomcat:5.5.15:::::::*
cpe:2.3:a:apache:tomcat:5.5.5:::::::*
cpe:2.3:a:apache:tomcat:5.5.21:::::::*
cpe:2.3:a:apache:tomcat:5.5.22:::::::*
cpe:2.3:a:apache:tomcat:5.5.3:::::::*
cpe:2.3:a:apache:tomcat:5.5.9:::::::*
cpe:2.3:a:apache:tomcat:5.5.25:::::::*
cpe:2.3:a:apache:tomcat:5.5.2:::::::*
cpe:2.3:a:apache:tomcat:5.5.0:::::::*
cpe:2.3:a:apache:tomcat:5.5.13:::::::*
cpe:2.3:a:apache:tomcat:5.5.24:::::::*
cpe:2.3:a:apache:tomcat:5.5.8:::::::*
cpe:2.3:a:apache:tomcat:5.5.16:::::::*
cpe:2.3:a:apache:tomcat:5.5.17:::::::*
cpe:2.3:a:apache:tomcat:5.5.29:::::::*
cpe:2.3:a:apache:tomcat:5.5.19:::::::*
cpe:2.3:a:apache:tomcat:5.5.23:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:apache:tomcat:6.0.6:::::::*
cpe:2.3:a:apache:tomcat:6.0.11:::::::*
cpe:2.3:a:apache:tomcat:6.0.7:::::::*
cpe:2.3:a:apache:tomcat:6.0.4:::::::*
cpe:2.3:a:apache:tomcat:6.0.15:::::::*
cpe:2.3:a:apache:tomcat:6.0.20:::::::*
cpe:2.3:a:apache:tomcat:6.0.10:::::::*
cpe:2.3:a:apache:tomcat:6.0.3:::::::*
cpe:2.3:a:apache:tomcat:6.0.9:::::::*
cpe:2.3:a:apache:tomcat:6.0.24:::::::*
cpe:2.3:a:apache:tomcat:6.0.17:::::::*
cpe:2.3:a:apache:tomcat:6.0.0:::::::*
cpe:2.3:a:apache:tomcat:6.0.14:::::::*
cpe:2.3:a:apache:tomcat:6.0.1:::::::*
cpe:2.3:a:apache:tomcat:6.0.12:::::::*
cpe:2.3:a:apache:tomcat:6.0.18:::::::*
cpe:2.3:a:apache:tomcat:6.0.5:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:::::::*
cpe:2.3:a:apache:tomcat:6.0.13:::::::*
cpe:2.3:a:apache:tomcat:6.0.26:::::::*
cpe:2.3:a:apache:tomcat:6.0.19:::::::*
cpe:2.3:a:apache:tomcat:6.0.27:::::::*
cpe:2.3:a:apache:tomcat:6.0.16:::::::*
cpe:2.3:a:apache:tomcat:6.0.8:::::::*