---
title: "CVE-2011-2481\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2011-2481?format=md
keywords: index, follow
---

# CVE-2011-2481

Publication date 15 August 2011

Last updated 4 August 2025

---

Ubuntu priority

**Low**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an
XML parser used for other web applications, which allows local users to
read or modify the (1) web.xml, (2) context.xml, or (3) tld files of
arbitrary web applications via a crafted application that is loaded earlier
than the target application. NOTE: this vulnerability exists because of a
CVE-2009-0783 regression.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| tomcat7 | 11.04 natty | Not in release |
| 10.10 maverick | Not in release |
| 10.04 LTS lucid | Not in release |
| 8.04 LTS hardy | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2481)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2011-2481)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2011-2481)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2011-2481)

### Other references

* <http://tomcat.apache.org/security-7.html>
* <https://www.cve.org/CVERecord?id=CVE-2011-2481>