Vulnerable: version 5.5.36 is affected by 20 known vulnerabilities. See below.
www/apache-tomcat55 5.5.36 NetBSD
The Apache Project's Java Servlet 2.4 and JSP 2.0 server
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- License
- apache-2.0
- Categories
- www, java
- Package size
- 7948.1 KiB, 20598.4 KiB installed
Description
Tomcat is the Java Servlet / Java Server Page environment produced by the Apache Foundation's Tomcat Project. Tomcat can be run as a standalone web server with Servlet and JSP support, or using Apache Server as its web server via the mod_jk Apache module (www/ap-jk).
This is the Tomcat 5.5 package, which is a Java Serlet 2.4 and JSP 2.0 server.
Install
Binary package:
pkgin install apache-tomcat
From pkgsrc:
cd /usr/pkgsrc/www/apache-tomcat55 && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 5.5.36 |
| NetBSD 10.1 aarch64 | 5.5.36 |
| SmartOS / illumos x86_64 | 5.5.36 |
| macOS 15 arm64 | 5.5.36 |
Dependencies
Run dependencies 1
No port depends on this one.
Known vulnerabilities 20
- apache-tomcat: cross-site-request-forgery
- apache-tomcat: directory-traversal
- apache-tomcat: denial-of-service
- apache-tomcat: denial-of-service
- apache-tomcat: access-bypass (CVE-2016-5388)
- apache-tomcat: access-bypass (CVE-2016-5388)
- apache-tomcat: access-bypass (CVE-2016-5388)
- apache-tomcat: access-bypass (CVE-2016-5388)
- apache-tomcat: eol
- apache-tomcat: eol
- apache-tomcat: eol
- apache-tomcat: eol
- apache-tomcat: open-redirect (CVE-2018-11784)
- apache-tomcat: sensitive-information-disclosure (CVE-2020-17527)
- apache-tomcat: sensitive-information-disclosure (CVE-2021-24122)
- apache-tomcat: remote-denial-of-service (CVE-2021-30639)
- apache-tomcat: authentication-bypass (CVE-2021-30640)
- apache-tomcat: http-request-smuggling (CVE-2021-33037)
- apache-tomcat: privilege-escalation (CVE-2022-23181)
- apache-tomcat: denial-of-service (CVE-2022-29885)