Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: local policy)
From: "Caldarale, Charles R" <Chuck.Caldarale@unisys.com>
To: Tomcat Users List <users@tomcat.apache.org>
Date: Sun, 10 Oct 2010 19:52:42 -0500
Subject: RE: JSESSIONID weakness Severity in Tomcat 6.0.29?
Thread-Topic: JSESSIONID weakness Severity in Tomcat 6.0.29?
Thread-Index: 
 AQITYjavQn9EH88xmVO7rv9IpHSP7gIXfweVApbha8UBV2JKawFFFCMQAgCV7zACT1MVkgI2WswWkjxt0jCAAADwwA==
Message-ID: 
 <99C8B2929B39C24493377AC7A121E21F99ED0A5123@USEA-EXCH8.na.uis.unisys.com>
References: <005a01cb68b1$e0db7550$a2925ff0$@yahoo.com>
 <4CB217E3.3020809@apache.org> <006201cb68b5$ad91bd90$08b538b0$@yahoo.com>
 <4CB21D5F.9070009@apache.org> <006d01cb68c9$f0e51010$d2af3030$@yahoo.com>
 <440BE733-52BC-41A4-AD24-4DF4B9CAEAAE@als.com>
 <006f01cb68d7$7848b7c0$68da2740$@yahoo.com>
 <99C8B2929B39C24493377AC7A121E21F99ED0A5121@USEA-EXCH8.na.uis.unisys.com>
 <007301cb68dd$cc2a0c80$647e2580$@yahoo.com>
In-Reply-To: <007301cb68dd$cc2a0c80$647e2580$@yahoo.com>
Accept-Language: en-US
Content-Language: en-US
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

> From: Brian [mailto:bbprefix-mail@yahoo.com]=20
> Subject: RE: JSESSIONID weakness Severity in Tomcat 6.0.29?

> I was not familiar with the options available in the
> container itself. I am still not familiar indeed.

Probably the best place to start researching would be sections 7 and 12 of =
the servlet spec. =20

You can download a copy of the spec here:
http://jcp.org/aboutJava/communityprocess/mrel/jsr154/index2.html

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MA=
TERIAL and is thus for use only by the intended recipient. If you received =
this in error, please contact the sender and delete the e-mail and its atta=
chments from all computers.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org