Tomcat exploit published (fixed in 6.0.18)

[kjkoster]

Dear All,

For those of you running Tomcat version 6: exploit code has been published for one of Tomcat's security vulnerabilities (http://www.milw0rm.com/exploits/6229).

Tomcat 6.0.18 fixes this issue (http://tomcat.apache.org/security-6.html).

Kees Jan

[Barry]

Remember to Jail or chroot your application servers to keep possible attackers out of your root filesystems