CVE-2013-4286: Input Validation
First published: Tue Feb 25 2014(Updated: )
Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| maven/org.apache.tomcat:tomcat | >=8.0.0-RC1<8.0.0-RC3 | 8.0.0-RC3 |
| maven/org.apache.tomcat:tomcat | >=7.0.0<7.0.47 | 7.0.47 |
| maven/org.apache.tomcat:tomcat | <6.0.39 | 6.0.39 |
| redhat/tomcat | <7.0.47 | 7.0.47 |
| redhat/tomcat | <6.0.39 | 6.0.39 |
| redhat/tomcat | <8.0.0 | 8.0.0 |
| Apache Tomcat | =7.0.0 | |
| Apache Tomcat | =7.0.0-beta | |
| Apache Tomcat | =7.0.1 | |
| Apache Tomcat | =7.0.2 | |
| Apache Tomcat | =7.0.2-beta | |
| Apache Tomcat | =7.0.3 | |
| Apache Tomcat | =7.0.4 | |
| Apache Tomcat | =7.0.4-beta | |
| Apache Tomcat | =7.0.10 | |
| Apache Tomcat | =7.0.11 | |
| Apache Tomcat | =7.0.12 | |
| Apache Tomcat | =7.0.13 | |
| Apache Tomcat | =7.0.14 | |
| Apache Tomcat | =7.0.15 | |
| Apache Tomcat | =7.0.16 | |
| Apache Tomcat | =7.0.17 | |
| Apache Tomcat | =7.0.18 | |
| Apache Tomcat | =7.0.19 | |
| Apache Tomcat | =7.0.20 | |
| Apache Tomcat | =7.0.21 | |
| Apache Tomcat | =7.0.22 | |
| Apache Tomcat | =7.0.23 | |
| Apache Tomcat | =7.0.24 | |
| Apache Tomcat | =7.0.25 | |
| Apache Tomcat | =7.0.26 | |
| Apache Tomcat | =7.0.27 | |
| Apache Tomcat | =7.0.28 | |
| Apache Tomcat | =7.0.29 | |
| Apache Tomcat | =7.0.30 | |
| Apache Tomcat | =7.0.31 | |
| Apache Tomcat | =7.0.32 | |
| Apache Tomcat | =7.0.33 | |
| Apache Tomcat | =7.0.34 | |
| Apache Tomcat | =7.0.35 | |
| Apache Tomcat | =7.0.36 | |
| Apache Tomcat | =7.0.37 | |
| Apache Tomcat | =7.0.38 | |
| Apache Tomcat | =7.0.39 | |
| Apache Tomcat | =7.0.40 | |
| Apache Tomcat | =7.0.41 | |
| Apache Tomcat | =7.0.42 | |
| Apache Tomcat | =7.0.43 | |
| Apache Tomcat | =7.0.44 | |
| Apache Tomcat | =7.0.45 | |
| Apache Tomcat | =7.0.46 | |
| Apache Tomcat | =8.0.0-rc1 | |
| Apache Tomcat | =8.0.0-rc2 | |
| Apache Tomcat | <=6.0.37 | |
| Apache Tomcat | =1.1.3 | |
| Apache Tomcat | =3.0 | |
| Apache Tomcat | =3.1 | |
| Apache Tomcat | =3.1.1 | |
| Apache Tomcat | =3.2 | |
| Apache Tomcat | =3.2.1 | |
| Apache Tomcat | =3.2.2 | |
| Apache Tomcat | =3.2.2-beta2 | |
| Apache Tomcat | =3.2.3 | |
| Apache Tomcat | =3.2.4 | |
| Apache Tomcat | =3.3 | |
| Apache Tomcat | =3.3.1 | |
| Apache Tomcat | =3.3.1a | |
| Apache Tomcat | =3.3.2 | |
| Apache Tomcat | =4 | |
| Apache Tomcat | =4.0.0 | |
| Apache Tomcat | =4.0.1 | |
| Apache Tomcat | =4.0.2 | |
| Apache Tomcat | =4.0.3 | |
| Apache Tomcat | =4.0.4 | |
| Apache Tomcat | =4.0.5 | |
| Apache Tomcat | =4.0.6 | |
| Apache Tomcat | =4.1.0 | |
| Apache Tomcat | =4.1.1 | |
| Apache Tomcat | =4.1.2 | |
| Apache Tomcat | =4.1.3 | |
| Apache Tomcat | =4.1.3-beta | |
| Apache Tomcat | =4.1.9-beta | |
| Apache Tomcat | =4.1.10 | |
| Apache Tomcat | =4.1.12 | |
| Apache Tomcat | =4.1.15 | |
| Apache Tomcat | =4.1.24 | |
| Apache Tomcat | =4.1.28 | |
| Apache Tomcat | =4.1.29 | |
| Apache Tomcat | =4.1.31 | |
| Apache Tomcat | =4.1.36 | |
| Apache Tomcat | =5 | |
| Apache Tomcat | =5.0.0 | |
| Apache Tomcat | =5.0.1 | |
| Apache Tomcat | =5.0.2 | |
| Apache Tomcat | =5.0.3 | |
| Apache Tomcat | =5.0.4 | |
| Apache Tomcat | =5.0.5 | |
| Apache Tomcat | =5.0.6 | |
| Apache Tomcat | =5.0.7 | |
| Apache Tomcat | =5.0.8 | |
| Apache Tomcat | =5.0.9 | |
| Apache Tomcat | =5.0.10 | |
| Apache Tomcat | =5.0.11 | |
| Apache Tomcat | =5.0.12 | |
| Apache Tomcat | =5.0.13 | |
| Apache Tomcat | =5.0.14 | |
| Apache Tomcat | =5.0.15 | |
| Apache Tomcat | =5.0.16 | |
| Apache Tomcat | =5.0.17 | |
| Apache Tomcat | =5.0.18 | |
| Apache Tomcat | =5.0.19 | |
| Apache Tomcat | =5.0.21 | |
| Apache Tomcat | =5.0.22 | |
| Apache Tomcat | =5.0.23 | |
| Apache Tomcat | =5.0.24 | |
| Apache Tomcat | =5.0.25 | |
| Apache Tomcat | =5.0.26 | |
| Apache Tomcat | =5.0.27 | |
| Apache Tomcat | =5.0.28 | |
| Apache Tomcat | =5.0.29 | |
| Apache Tomcat | =5.0.30 | |
| Apache Tomcat | =5.5.0 | |
| Apache Tomcat | =5.5.1 | |
| Apache Tomcat | =5.5.2 | |
| Apache Tomcat | =5.5.3 | |
| Apache Tomcat | =5.5.4 | |
| Apache Tomcat | =5.5.5 | |
| Apache Tomcat | =5.5.6 | |
| Apache Tomcat | =5.5.7 | |
| Apache Tomcat | =5.5.8 | |
| Apache Tomcat | =5.5.9 | |
| Apache Tomcat | =5.5.10 | |
| Apache Tomcat | =5.5.11 | |
| Apache Tomcat | =5.5.12 | |
| Apache Tomcat | =5.5.13 | |
| Apache Tomcat | =5.5.14 | |
| Apache Tomcat | =5.5.15 | |
| Apache Tomcat | =5.5.16 | |
| Apache Tomcat | =5.5.17 | |
| Apache Tomcat | =5.5.18 | |
| Apache Tomcat | =5.5.19 | |
| Apache Tomcat | =5.5.20 | |
| Apache Tomcat | =5.5.21 | |
| Apache Tomcat | =5.5.22 | |
| Apache Tomcat | =5.5.23 | |
| Apache Tomcat | =5.5.24 | |
| Apache Tomcat | =5.5.25 | |
| Apache Tomcat | =5.5.26 | |
| Apache Tomcat | =5.5.27 | |
| Apache Tomcat | =5.5.28 | |
| Apache Tomcat | =5.5.29 | |
| Apache Tomcat | =5.5.30 | |
| Apache Tomcat | =5.5.31 | |
| Apache Tomcat | =5.5.32 | |
| Apache Tomcat | =5.5.33 | |
| Apache Tomcat | =5.5.34 | |
| Apache Tomcat | =5.5.35 | |
| Apache Tomcat | =6 | |
| Apache Tomcat | =6.0 | |
| Apache Tomcat | =6.0.0 | |
| Apache Tomcat | =6.0.0-alpha | |
| Apache Tomcat | =6.0.1 | |
| Apache Tomcat | =6.0.1-alpha | |
| Apache Tomcat | =6.0.2 | |
| Apache Tomcat | =6.0.2-alpha | |
| Apache Tomcat | =6.0.2-beta | |
| Apache Tomcat | =6.0.3 | |
| Apache Tomcat | =6.0.10 | |
| Apache Tomcat | =6.0.11 | |
| Apache Tomcat | =6.0.12 | |
| Apache Tomcat | =6.0.13 | |
| Apache Tomcat | =6.0.14 | |
| Apache Tomcat | =6.0.15 | |
| Apache Tomcat | =6.0.16 | |
| Apache Tomcat | =6.0.17 | |
| Apache Tomcat | =6.0.18 | |
| Apache Tomcat | =6.0.19 | |
| Apache Tomcat | =6.0.20 | |
| Apache Tomcat | =6.0.24 | |
| Apache Tomcat | =6.0.26 | |
| Apache Tomcat | =6.0.27 | |
| Apache Tomcat | =6.0.28 | |
| Apache Tomcat | =6.0.29 | |
| Apache Tomcat | =6.0.30 | |
| Apache Tomcat | =6.0.31 | |
| Apache Tomcat | =6.0.32 | |
| Apache Tomcat | =6.0.33 | |
| Apache Tomcat | =6.0.35 | |
| Apache Tomcat | =6.0.36 | |
| =7.0.0 | ||
| =7.0.0-beta | ||
| =7.0.1 | ||
| =7.0.2 | ||
| =7.0.2-beta | ||
| =7.0.3 | ||
| =7.0.4 | ||
| =7.0.4-beta | ||
| =7.0.10 | ||
| =7.0.11 | ||
| =7.0.12 | ||
| =7.0.13 | ||
| =7.0.14 | ||
| =7.0.15 | ||
| =7.0.16 | ||
| =7.0.17 | ||
| =7.0.18 | ||
| =7.0.19 | ||
| =7.0.20 | ||
| =7.0.21 | ||
| =7.0.22 | ||
| =7.0.23 | ||
| =7.0.24 | ||
| =7.0.25 | ||
| =7.0.26 | ||
| =7.0.27 | ||
| =7.0.28 | ||
| =7.0.29 | ||
| =7.0.30 | ||
| =7.0.31 | ||
| =7.0.32 | ||
| =7.0.33 | ||
| =7.0.34 | ||
| =7.0.35 | ||
| =7.0.36 | ||
| =7.0.37 | ||
| =7.0.38 | ||
| =7.0.39 | ||
| =7.0.40 | ||
| =7.0.41 | ||
| =7.0.42 | ||
| =7.0.43 | ||
| =7.0.44 | ||
| =7.0.45 | ||
| =7.0.46 | ||
| =8.0.0-rc1 | ||
| =8.0.0-rc2 | ||
| <=6.0.37 | ||
| =1.1.3 | ||
| =3.0 | ||
| =3.1 | ||
| =3.1.1 | ||
| =3.2 | ||
| =3.2.1 | ||
| =3.2.2 | ||
| =3.2.2-beta2 | ||
| =3.2.3 | ||
| =3.2.4 | ||
| =3.3 | ||
| =3.3.1 | ||
| =3.3.1a | ||
| =3.3.2 | ||
| =4 | ||
| =4.0.0 | ||
| =4.0.1 | ||
| =4.0.2 | ||
| =4.0.3 | ||
| =4.0.4 | ||
| =4.0.5 | ||
| =4.0.6 | ||
| =4.1.0 | ||
| =4.1.1 | ||
| =4.1.2 | ||
| =4.1.3 | ||
| =4.1.3-beta | ||
| =4.1.9-beta | ||
| =4.1.10 | ||
| =4.1.12 | ||
| =4.1.15 | ||
| =4.1.24 | ||
| =4.1.28 | ||
| =4.1.29 | ||
| =4.1.31 | ||
| =4.1.36 | ||
| =5 | ||
| =5.0.0 | ||
| =5.0.1 | ||
| =5.0.2 | ||
| =5.0.3 | ||
| =5.0.4 | ||
| =5.0.5 | ||
| =5.0.6 | ||
| =5.0.7 | ||
| =5.0.8 | ||
| =5.0.9 | ||
| =5.0.10 | ||
| =5.0.11 | ||
| =5.0.12 | ||
| =5.0.13 | ||
| =5.0.14 | ||
| =5.0.15 | ||
| =5.0.16 | ||
| =5.0.17 | ||
| =5.0.18 | ||
| =5.0.19 | ||
| =5.0.21 | ||
| =5.0.22 | ||
| =5.0.23 | ||
| =5.0.24 | ||
| =5.0.25 | ||
| =5.0.26 | ||
| =5.0.27 | ||
| =5.0.28 | ||
| =5.0.29 | ||
| =5.0.30 | ||
| =5.5.0 | ||
| =5.5.1 | ||
| =5.5.2 | ||
| =5.5.3 | ||
| =5.5.4 | ||
| =5.5.5 | ||
| =5.5.6 | ||
| =5.5.7 | ||
| =5.5.8 | ||
| =5.5.9 | ||
| =5.5.10 | ||
| =5.5.11 | ||
| =5.5.12 | ||
| =5.5.13 | ||
| =5.5.14 | ||
| =5.5.15 | ||
| =5.5.16 | ||
| =5.5.17 | ||
| =5.5.18 | ||
| =5.5.19 | ||
| =5.5.20 | ||
| =5.5.21 | ||
| =5.5.22 | ||
| =5.5.23 | ||
| =5.5.24 | ||
| =5.5.25 | ||
| =5.5.26 | ||
| =5.5.27 | ||
| =5.5.28 | ||
| =5.5.29 | ||
| =5.5.30 | ||
| =5.5.31 | ||
| =5.5.32 | ||
| =5.5.33 | ||
| =5.5.34 | ||
| =5.5.35 | ||
| =6 | ||
| =6.0 | ||
| =6.0.0 | ||
| =6.0.0-alpha | ||
| =6.0.1 | ||
| =6.0.1-alpha | ||
| =6.0.2 | ||
| =6.0.2-alpha | ||
| =6.0.2-beta | ||
| =6.0.3 | ||
| =6.0.10 | ||
| =6.0.11 | ||
| =6.0.12 | ||
| =6.0.13 | ||
| =6.0.14 | ||
| =6.0.15 | ||
| =6.0.16 | ||
| =6.0.17 | ||
| =6.0.18 | ||
| =6.0.19 | ||
| =6.0.20 | ||
| =6.0.24 | ||
| =6.0.26 | ||
| =6.0.27 | ||
| =6.0.28 | ||
| =6.0.29 | ||
| =6.0.30 | ||
| =6.0.31 | ||
| =6.0.32 | ||
| =6.0.33 | ||
| =6.0.35 | ||
| =6.0.36 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://nvd.nist.gov/vuln/detail/CVE-2013-4286
- https://bugzilla.redhat.com/show_bug.cgi?id=1069921
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013
- https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E
- https://rhn.redhat.com/errata/RHSA-2014-0686.html
- http://advisories.mageia.org/MGASA-2014-0148.html
- http://marc.info/?l=bugtraq&m=141390017113542&w=2
- http://marc.info/?l=bugtraq&m=144498216801440&w=2
- http://rhn.redhat.com/errata/RHSA-2014-0343.html
- http://rhn.redhat.com/errata/RHSA-2014-0344.html
- http://rhn.redhat.com/errata/RHSA-2014-0345.html
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://secunia.com/advisories/57675
- http://secunia.com/advisories/59036
- http://secunia.com/advisories/59675
- http://secunia.com/advisories/59722
- http://secunia.com/advisories/59724
- http://secunia.com/advisories/59733
- http://secunia.com/advisories/59873
- http://svn.apache.org/viewvc?view=revision&revision=1521829
- http://svn.apache.org/viewvc?view=revision&revision=1521854
- http://svn.apache.org/viewvc?view=revision&revision=1552565
- http://tomcat.apache.org/security-6.html
- http://tomcat.apache.org/security-7.html
- http://tomcat.apache.org/security-8.html
- http://www-01.ibm.com/support/docview.wss?uid=swg21667883
- http://www-01.ibm.com/support/docview.wss?uid=swg21675886
- http://www-01.ibm.com/support/docview.wss?uid=swg21677147
- http://www-01.ibm.com/support/docview.wss?uid=swg21678113
- http://www-01.ibm.com/support/docview.wss?uid=swg21678231
- http://www.debian.org/security/2016/dsa-3530
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:052
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/65773
- http://www.ubuntu.com/usn/USN-2130-1
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- https://github.com/advisories/GHSA-j448-j653-r3vj (Advisory)
- https://access.redhat.com/security/cve/CVE-2005-2090
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1069925
- https://rhn.redhat.com/errata/RHSA-2014-0345.html
- https://rhn.redhat.com/errata/RHSA-2014-0343.html
- https://rhn.redhat.com/errata/RHSA-2014-0344.html
- https://rhn.redhat.com/errata/RHSA-2014-0373.html
- https://rhn.redhat.com/errata/RHSA-2014-0374.html
- https://rhn.redhat.com/errata/RHSA-2014-0429.html
- https://rhn.redhat.com/errata/RHSA-2014-0459.html
- https://rhn.redhat.com/errata/RHSA-2014-0458.html
- https://rhn.redhat.com/errata/RHSA-2014-0511.html
- https://rhn.redhat.com/errata/RHSA-2014-0528.html
- https://rhn.redhat.com/errata/RHSA-2014-0527.html
- https://rhn.redhat.com/errata/RHSA-2014-0525.html
- https://rhn.redhat.com/errata/RHSA-2014-0526.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1069921#c0
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1069921#c37
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1069921#c38
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1069921#c39
- http://tomcat.apache.org/contact.html
- https://rhn.redhat.com/errata/RHSA-2015-1009.html
- https://github.com/apache/tomcat/commit/41b90b6ebc3e7f898a5a87d197ddf63790d33315
- https://github.com/apache/tomcat/commit/7c040003f1387795356605566be7870cf70e05dc
- https://github.com/apache/tomcat/commit/bcce3e4997a4ed06fe03e2517443f3ad8ade2dfa
- https://github.com/apache/tomcat/commit/d0b3e252eb168fafbfb4c3efc16d4192fc8fad6c
- https://github.com/apache/tomcat80/commit/ff00954b78e6484e40f323c0cef2e6d95c2882b9
- https://web.archive.org/web/20140724174205/http://secunia.com/advisories/57675
- https://web.archive.org/web/20140804172142/http://secunia.com/advisories/59036
- https://web.archive.org/web/20141230041748/http://seclists.org/fulldisclosure/2014/Dec/23
- https://web.archive.org/web/20160317145515/http://www.securityfocus.com/archive/1/534161/100/0/threaded
- https://web.archive.org/web/20160729061926/http://www.securityfocus.com/bid/65773
- https://web.archive.org/web/20161014054543/http://www-01.ibm.com/support/docview.wss?uid=swg21678231
- https://web.archive.org/web/20161014054838/http://www-01.ibm.com/support/docview.wss?uid=swg21677147
- https://web.archive.org/web/20161014054913/http://www-01.ibm.com/support/docview.wss?uid=swg21678113
- https://web.archive.org/web/20161014054948/http://www-01.ibm.com/support/docview.wss?uid=swg21667883
- https://web.archive.org/web/20161024215453/http://secunia.com/advisories/59873
- https://web.archive.org/web/20161024215639/http://secunia.com/advisories/59722
- https://web.archive.org/web/20161024215804/http://secunia.com/advisories/59675
- https://web.archive.org/web/20161024220018/http://secunia.com/advisories/59724
- https://web.archive.org/web/20161024220034/http://secunia.com/advisories/59733
- https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
- collector/nvd-index
- agent/author
- agent/type
- agent/first-publish-date
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-j448-j653-r3vj
- alias/CVE-2013-4286
- agent/software-canonical-lookup
- agent/references
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/softwarecombine
- agent/description
- collector/nvd-cve
- source/NVD
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- collector/github-advisory
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apache
- canonical/apache tomcat
- version/apache tomcat/7.0.0
- version/apache tomcat/7.0.0-beta
- version/apache tomcat/7.0.1
- version/apache tomcat/7.0.2
- version/apache tomcat/7.0.2-beta
- version/apache tomcat/7.0.3
- version/apache tomcat/7.0.4
- version/apache tomcat/7.0.4-beta
- version/apache tomcat/7.0.10
- version/apache tomcat/7.0.11
- version/apache tomcat/7.0.12
- version/apache tomcat/7.0.13
- version/apache tomcat/7.0.14
- version/apache tomcat/7.0.15
- version/apache tomcat/7.0.16
- version/apache tomcat/7.0.17
- version/apache tomcat/7.0.18
- version/apache tomcat/7.0.19
- version/apache tomcat/7.0.20
- version/apache tomcat/7.0.21
- version/apache tomcat/7.0.22
- version/apache tomcat/7.0.23
- version/apache tomcat/7.0.24
- version/apache tomcat/7.0.25
- version/apache tomcat/7.0.26
- version/apache tomcat/7.0.27
- version/apache tomcat/7.0.28
- version/apache tomcat/7.0.29
- version/apache tomcat/7.0.30
- version/apache tomcat/7.0.31
- version/apache tomcat/7.0.32
- version/apache tomcat/7.0.33
- version/apache tomcat/7.0.34
- version/apache tomcat/7.0.35
- version/apache tomcat/7.0.36
- version/apache tomcat/7.0.37
- version/apache tomcat/7.0.38
- version/apache tomcat/7.0.39
- version/apache tomcat/7.0.40
- version/apache tomcat/7.0.41
- version/apache tomcat/7.0.42
- version/apache tomcat/7.0.43
- version/apache tomcat/7.0.44
- version/apache tomcat/7.0.45
- version/apache tomcat/7.0.46
- version/apache tomcat/8.0.0-rc1
- version/apache tomcat/8.0.0-rc2
- version/apache tomcat/6.0.37
- version/apache tomcat/1.1.3
- version/apache tomcat/3.0
- version/apache tomcat/3.1
- version/apache tomcat/3.1.1
- version/apache tomcat/3.2
- version/apache tomcat/3.2.1
- version/apache tomcat/3.2.2
- version/apache tomcat/3.2.2-beta2
- version/apache tomcat/3.2.3
- version/apache tomcat/3.2.4
- version/apache tomcat/3.3
- version/apache tomcat/3.3.1
- version/apache tomcat/3.3.1a
- version/apache tomcat/3.3.2
- version/apache tomcat/4
- version/apache tomcat/4.0.0
- version/apache tomcat/4.0.1
- version/apache tomcat/4.0.2
- version/apache tomcat/4.0.3
- version/apache tomcat/4.0.4
- version/apache tomcat/4.0.5
- version/apache tomcat/4.0.6
- version/apache tomcat/4.1.0
- version/apache tomcat/4.1.1
- version/apache tomcat/4.1.2
- version/apache tomcat/4.1.3
- version/apache tomcat/4.1.3-beta
- version/apache tomcat/4.1.9-beta
- version/apache tomcat/4.1.10
- version/apache tomcat/4.1.12
- version/apache tomcat/4.1.15
- version/apache tomcat/4.1.24
- version/apache tomcat/4.1.28
- version/apache tomcat/4.1.29
- version/apache tomcat/4.1.31
- version/apache tomcat/4.1.36
- version/apache tomcat/5
- version/apache tomcat/5.0.0
- version/apache tomcat/5.0.1
- version/apache tomcat/5.0.2
- version/apache tomcat/5.0.3
- version/apache tomcat/5.0.4
- version/apache tomcat/5.0.5
- version/apache tomcat/5.0.6
- version/apache tomcat/5.0.7
- version/apache tomcat/5.0.8
- version/apache tomcat/5.0.9
- version/apache tomcat/5.0.10
- version/apache tomcat/5.0.11
- version/apache tomcat/5.0.12
- version/apache tomcat/5.0.13
- version/apache tomcat/5.0.14
- version/apache tomcat/5.0.15
- version/apache tomcat/5.0.16
- version/apache tomcat/5.0.17
- version/apache tomcat/5.0.18
- version/apache tomcat/5.0.19
- version/apache tomcat/5.0.21
- version/apache tomcat/5.0.22
- version/apache tomcat/5.0.23
- version/apache tomcat/5.0.24
- version/apache tomcat/5.0.25
- version/apache tomcat/5.0.26
- version/apache tomcat/5.0.27
- version/apache tomcat/5.0.28
- version/apache tomcat/5.0.29
- version/apache tomcat/5.0.30
- version/apache tomcat/5.5.0
- version/apache tomcat/5.5.1
- version/apache tomcat/5.5.2
- version/apache tomcat/5.5.3
- version/apache tomcat/5.5.4
- version/apache tomcat/5.5.5
- version/apache tomcat/5.5.6
- version/apache tomcat/5.5.7
- version/apache tomcat/5.5.8
- version/apache tomcat/5.5.9
- version/apache tomcat/5.5.10
- version/apache tomcat/5.5.11
- version/apache tomcat/5.5.12
- version/apache tomcat/5.5.13
- version/apache tomcat/5.5.14
- version/apache tomcat/5.5.15
- version/apache tomcat/5.5.16
- version/apache tomcat/5.5.17
- version/apache tomcat/5.5.18
- version/apache tomcat/5.5.19
- version/apache tomcat/5.5.20
- version/apache tomcat/5.5.21
- version/apache tomcat/5.5.22
- version/apache tomcat/5.5.23
- version/apache tomcat/5.5.24
- version/apache tomcat/5.5.25
- version/apache tomcat/5.5.26
- version/apache tomcat/5.5.27
- version/apache tomcat/5.5.28
- version/apache tomcat/5.5.29
- version/apache tomcat/5.5.30
- version/apache tomcat/5.5.31
- version/apache tomcat/5.5.32
- version/apache tomcat/5.5.33
- version/apache tomcat/5.5.34
- version/apache tomcat/5.5.35
- version/apache tomcat/6
- version/apache tomcat/6.0
- version/apache tomcat/6.0.0
- version/apache tomcat/6.0.0-alpha
- version/apache tomcat/6.0.1
- version/apache tomcat/6.0.1-alpha
- version/apache tomcat/6.0.2
- version/apache tomcat/6.0.2-alpha
- version/apache tomcat/6.0.2-beta
- version/apache tomcat/6.0.3
- version/apache tomcat/6.0.10
- version/apache tomcat/6.0.11
- version/apache tomcat/6.0.12
- version/apache tomcat/6.0.13
- version/apache tomcat/6.0.14
- version/apache tomcat/6.0.15
- version/apache tomcat/6.0.16
- version/apache tomcat/6.0.17
- version/apache tomcat/6.0.18
- version/apache tomcat/6.0.19
- version/apache tomcat/6.0.20
- version/apache tomcat/6.0.24
- version/apache tomcat/6.0.26
- version/apache tomcat/6.0.27
- version/apache tomcat/6.0.28
- version/apache tomcat/6.0.29
- version/apache tomcat/6.0.30
- version/apache tomcat/6.0.31
- version/apache tomcat/6.0.32
- version/apache tomcat/6.0.33
- version/apache tomcat/6.0.35
- version/apache tomcat/6.0.36
- package-manager/maven
- package-manager/redhat